The OSCP Toolkit: BloodHound + RustHound-CE

You have a foothold. You ran NetExec, validated a credential, and watched NXC print that green [+]. Good. Now what? Now you're standing in a domain with one low-priv account and no idea where it can t