SOAPY: STEALTHY ENUMERATION OF ACTIVE DIRECTORY ENVIRONMENTS THROUGH ADWS

Summary from the TLDR InfoSec newsletter

Active Directory Web Services (ADWS) is a default-enabled service on Active Directory domain controllers that allows clients to interact with the local LDAP service using SOAP messages without requiring user authentication. A group of interns from X-Force Red implemented the protocol stack in a tool and Python library named SoaPy. Before this, interactions with ADWS were limited to Microsoft or .NET tools, restricting protocol usage to Windows hosts.