WINDOWS. AD. OSINT. Locate privileged users

Purpose

Locate and discover privileged user in Active Directory. Locate privileged users in the AD, either by direct association or by nesting to a group with special privileges.

Steps

[*] AD users have a property that is set to one if you have direct nested privileges in any AD group.

COMMAND: Get-ADUser administrador -properties *

[*] List All users

Command: Get-ADUser -Filter {AdminCount -eq 1} - | Select-Object Name, SamAccountName

[*]  View user information

We already have a way to attack a network and try to make lateral movement.

By GoN | Published: Feb 2025 | Last Updated:

Security. Tools. Check URLs search.censys.io

Purpose

It is powefull tool to extract information from a link or IP very fast.

To know what you have exposed to the internet

Steps

Link: https://search.censys.io/

Free version without register.

The query es very fast. There are a lot of important information.

For example

If you push to "VIEW ALL DATA"

It depends on Host, the information is more extensive or not.

To consider

by GoN | Published: Sept 5, 2023 | Last Updated: 

Security. OSINT. Tools. Check URLs

Purpose

Extract information from a link.

It is impressive the information that comes to extract in such a short time.

Steps

Link: https://web-check.xyz/

One example

by GoN | Published: Jul 28 2023 | Last Updated: