Live verification scoring + standalone score command by mkultraWasHere · Pull Request #355 · dreadnode/DreadGOAD

Commits on Jul 12, 2026

feat(score): add live verification and standalone score command

mkultraWasHere
and
claude
committed

Commits on Jul 13, 2026

fix(score): harden live verification checks

mkultraWasHere
and
claude
committed
feat(score): add Azure Bastion SSH support for live verification

mkultraWasHere
and
claude
committed
fix(score): harden Azure BastionShellRunner

mkultraWasHere
and
claude
committed
feat(score): auto-discover Azure Bastion, Kali VM, and SSH key

mkultraWasHere
and
claude
committed
docs: add scoring.md and update scoreboard.md references

mkultraWasHere
and
claude
committed
fix(score): use NetBIOS names for DCSync, remove technique scoring, add summary output

mkultraWasHere
and
claude
committed
fix: address Copilot PR review feedback

mkultraWasHere
and
claude
committed
fix(score): stderr summary, failed check reporting, filter krbtgt candidates

mkultraWasHere
and
claude
committed
fix: align remaining /tmp/report.jsonl references to ./report.jsonl

mkultraWasHere
and
claude
committed
fix(score): emit failed_check for missing dc_ip on live_auth, validate attack-box format

mkultraWasHere
and
claude
committed
fix(score): improve error when Azure resource ID used without -p azure

mkultraWasHere
and
claude
committed
fix: guard parseNXCOutput against empty username and fix FailedCheck docs

mkultraWasHere
and
claude
committed
fix(score): guard empty username, deduplicate cred matching, align SSM poll deadline

mkultraWasHere
and
claude
committed
fix(variant): re-encrypt PowerShell SecureStrings with mapped passwords

mkultraWasHere
and
claude
committed
fix(score): local auth fallback for host admin checks and nxc flag conflict

mkultraWasHere
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Live verification scoring + standalone score command#355

Live verification scoring + standalone score command#355
mkultraWasHere wants to merge 24 commits into
mainfrom
feat/live-verification

Commits on Jul 12, 2026

feat(score): add live verification and standalone score command

Commits on Jul 13, 2026

fix(score): harden live verification checks

feat(score): add Azure Bastion SSH support for live verification

fix(score): harden Azure BastionShellRunner

feat(score): auto-discover Azure Bastion, Kali VM, and SSH key

docs: add scoring.md and update scoreboard.md references

fix(score): use NetBIOS names for DCSync, remove technique scoring, add summary output

fix: address Copilot PR review feedback

fix(score): stderr summary, failed check reporting, filter krbtgt candidates

fix: align remaining /tmp/report.jsonl references to ./report.jsonl

fix(score): emit failed_check for missing dc_ip on live_auth, validate attack-box format

fix(score): improve error when Azure resource ID used without -p azure

fix: guard parseNXCOutput against empty username and fix FailedCheck docs

fix(score): guard empty username, deduplicate cred matching, align SSM poll deadline

fix(variant): re-encrypt PowerShell SecureStrings with mapped passwords

fix(score): local auth fallback for host admin checks and nxc flag conflict

Commits on Jul 14, 2026

fix(variant): randomize share names to prevent GOAD fingerprinting

fix(score): fallback to admin_users list when findings lack hostname tag

Commits on Jul 15, 2026

feat(score): add reset subcommand for between-run range cleanup

fix(score): add rogue account detection, group membership diff, and exe blacklist to reset

Commits on Jul 16, 2026

fix(score): replace extension-based /tmp cleanup with catch-all approach

chore(scoreboard): add second agent prompt variant

Merge branch 'main' into feat/live-verification

fix(validate): distinguish transport errors from empty results in WinRM checks