Post Compromise Enumeration

Notes from oscp.adot8.com — active directory.

#active directory#adot8

source · oscp.adot8.com · active-directory/post-compromise-enumeration ↗

Post-Compromise Enumeration

Checklist

code

01net user /domain

code

01net group /domain

code

01Get-ADDomain
02[System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()

<pre><code><strong>Import .\PowerView.ps1 </strong><strong>Get-NetComputer | select operatingsystem,dnshostname </strong>Find-LocalAdminAccess </code></pre>

Dump domain information using ldapdomaindump
For a better view use Bloodhound and or Plumbhound
Identify high value targets
- Domain Administrators
- Enterprise Administrators
- Administrators
- Service Accounts
ENUMERATE