Query Active Directory with bloodyAD
tool
Summary
Connects bloodyAD to a domain controller to read/modify AD objects — point -d at the domain, --host at the DC, and --dns when name resolution is flaky.
Walkthrough
bloodyAD interacts with Active Directory over LDAP to enumerate and modify objects. Get the connection flags right and the rest of the commands fall into place.
Flag cheat-sheet
-d→ the AD domain--host→ the DC you want to talk to--dc-ip→ the DC's IP (use when hostname resolution is flaky)--dns→ the DNS server used to resolve AD names
``bash bloodyAD -d <TARGET> -u <USER> -p '<PASS>' --host dc01.<TARGET> --dc-ip <IP> --dns <IP> ``
Commands
bash
bloodyAD -d <TARGET> -u <USER> -p '<PASS>' --host dc01.<TARGET> --dc-ip <IP> --dns <IP>