AD paths analyser. similar to bloodhound, but shows a new edge ‘WriteScriptPath’ which is not shown in bloodhound.

Scan

$ ~/Downloads/adalanche-linux-x64-v2025.2.6 collect activedirectory --server 10.129.22.84  --username j.arbuckle  --password 'Th1sD4mnC4t!@1978'  --domain garfield.htb  --authmode ntlm  --port 389  --tlsmode NoTLS

Analyze

This will start adalanche on 127.0.0.1:8081

$ ~/Downloads/adalanche-linux-x64-v2025.2.6 analyze --bind 127.0.0.1:8081