ACLight

ACLight is a tool designed for the advanced discovery and analysis of privileged accounts in Active Directory, focusing on identifying Shadow Admins through detailed Assessment Control Lists (ACLs). The tool performs legitimate read-only LDAP queries, making it accessible to non-privileged users and capable of delivering comprehensive reports on account permissions across multiple layers. ACLight2, the enhanced version, offers improved speed, scalability, and recursive scanning capabilities to uncover hierarchical structures of privilege within the network.