ADWS (Active Directory Web Services) is the SOAP door enabled by default on every DC, which proxies to the local LDAP. This post explains the protocol, why I wrote an ADWS library in Rust, an adshell-rs shell that speaks both LDAP(S) and ADWS, and how I ported RustHound-CE's collection over ADWS without touching the parsing. There is also a Blue Team part on how to detect an AD data collector.
Microsoft Active Directory ADWS Red Team Blue Team RustTag
adshell-rs
1 article
-
2026-11-03 ADWS: What If We Knocked on a Different Door to Reach AD?