ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-24 05:15:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update Active Directory Attack.md

Browse Source 
Find AD
This commit is contained in:
Seb 2022-08-02 15:09:23 +02:00 committed by GitHub
parent e386a110d9
commit 310338b279
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Methodology and Resources/Active Directory Attack.md
View File

@ -460,10 +460,15 @@ Replace the customqueries.json file located at `/home/username/.config/bloodhoun
### Other Interesting Commands ### Other Interesting Commands
- **Find Domain Controller** - **Find Domain Controllers**
```ps1 ```ps1
nslookup domain.com nslookup domain.com
nslookup -type=srv _ldap._tcp.dc._msdcs.<domain>.com nslookup -type=srv _ldap._tcp.dc._msdcs.<domain>.com
nltest /dclist:domain.com
Get-ADDomainController -filter * | Select-Object name
gpresult /r
$Env:LOGONSERVER
echo %LOGONSERVER%
``` ```
## Most common paths to AD compromise ## Most common paths to AD compromise