-
Notifications
You must be signed in to change notification settings - Fork 44
Cheatsheets
Muhammad Ali edited this page Mar 28, 2024
·
3 revisions
- Find all Domain Users with zero "badPwdCount" value (Can be use safely for password spraying)
Get-DomainUser -Where 'badPwdCount contains 0'- View all kerberos users with their supported encryption types (Check if AES supported - Can be use with -Opsec)
Get-DomainUser -SPN -Select samaccountname,msDS-SupportedEncryptionTypesDomain LDAP
- Get-DomainUser
- Get-DomainComputer
- Get-DomainGroup
- Get-DomainGroupMember
- Get-DomainOU
- Get-Domain
- Get-DomainController
- Get-DomainDNSRecord
- Get-DomainDNSZone
- Get-DomainObject
- Get-DomainObjectAcl
- Get-DomainSCCM
- Get-DomainRBCD
- Get-DomainObjectOwner
- Remove-DomainDNSRecord
- Remove-DomainComputer
- Remove-DomainGroupMember
- Remove-DomainOU
- Remove-DomainObjectAcl
- Remove-DomainObject
- Remove-DomainUser
- Set-DomainDNSRecord
- Set-DomainUserPassword
- Set-DomainComputerPassword
- Set-DomainObject
- Set-DomainObjectDN
- Set-DomainObjectOwner
- Add-DomainDNSRecord
- Add-DomainUser
- Add-DomainComputer
- Add-DomainGroupMember
- Add-DomainOU
- Add-DomainObjectAcl