ADPathFinder is a tool designed to map privilege escalation paths within Active Directory environments by combining data from multiple BloodHound collectors (SharpHound, MSSQLHound, ConfigManBearPig) into a unified graph. It identifies shortest paths from low-privileged accounts to high-value targets such as Domain Admins and Domain Controllers, including cross-dataset paths involving AD, ADCS, MSSQL, and SCCM. The tool groups users and computers sharing the same attack paths to reduce duplicate findings and prioritizes paths by severity. Additionally, ADPathFinder performs password audits using cracked NTDS and hashcat results, enriched with BloodHound context to assess password reuse, weak patterns, and roastable accounts. It produces detailed HTML and JSON reports with attack graphs and PowerShell commands for validation. The tool is intended for internal network penetration testing and requires BloodHound CE and Neo4j to operate.

ADPathFinder itself is a security assessment tool rather than a vulnerability or exploit. Its impact lies in enabling penetration testers and red teams to more efficiently discover and prioritize complex Active Directory attack paths and password weaknesses that could be exploited by adversaries. By automating the correlation of multiple data sources and contextualizing password audit results, it improves the accuracy and speed of internal security assessments. There are no known exploits or malicious use cases inherent to ADPathFinder; it is a legitimate tool for authorized security testing.

This is a security assessment tool designed for authorized internal penetration testing. There is no vulnerability or exploit to patch. Organizations should ensure that ADPathFinder and related tools are used only by authorized personnel within controlled environments. No specific remediation or patch is applicable. If unauthorized use is suspected, standard access control and monitoring measures should be enforced.