sábado, 1 de febrero de 2025

WINDOWS. AD. OSINT. Locate privileged users

Purpose

Locate and discover privileged user in Active Directory. Locate privileged users in the AD, either by direct association or by nesting to a group with special privileges.

Steps

[*] AD users have a property that is set to one if you have direct nested privileges in any AD group.

COMMAND: Get-ADUser administrador -properties *


[*] List All users

Command: Get-ADUser -Filter {AdminCount -eq 1} - | Select-Object Name, SamAccountName


[*]  View user information


We already have a way to attack a network and try to make lateral movement.

By GoN | Published: Feb 2025 | Last Updated:

No hay comentarios: