← Back to search

Query Active Directory with bloodyAD

ad enumtool

Summary

Connects bloodyAD to a domain controller to read/modify AD objects — point -d at the domain, --host at the DC, and --dns when name resolution is flaky.

Walkthrough

bloodyAD interacts with Active Directory over LDAP to enumerate and modify objects. Get the connection flags right and the rest of the commands fall into place.

Flag cheat-sheet

  • -d → the AD domain
  • --host → the DC you want to talk to
  • --dc-ip → the DC's IP (use when hostname resolution is flaky)
  • --dns → the DNS server used to resolve AD names

``bash bloodyAD -d <TARGET> -u <USER> -p '<PASS>' --host dc01.<TARGET> --dc-ip <IP> --dns <IP> ``

Commands

bash

bloodyAD -d <TARGET> -u <USER> -p '<PASS>' --host dc01.<TARGET> --dc-ip <IP> --dns <IP>