Skip to content

Supported Authentication

Muhammad Ali edited this page Mar 28, 2024 · 8 revisions

Supported Authentication

  • --use-ldap(Port 389)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-ldap
  • --use-ldaps (Port 636)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-ldaps
  • --use-gc (Port 3268)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-gc
  • --use-gc-ldaps (Port 3269)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-gc-ldaps
  • -H (Pass the hash)
powerview domain.local/user@10.10.10.10 -H "b38ff50264b74508085d82c69794a4d8" 
  • --aes-key
# aes128-cts-hmac-sha1-96
powerview domain.local/user@10.10.10.10 --aes-key "1e7b2dab87d6c796cecaf7187d9e55db"

# aes256-cts-hmac-sha1-9
powerview domain.local/user@10.10.10.10 --aes-key "22bb483611e18c5f350ae00463de646371dda29e59229a4607265fc302e873ab"
  • -k @ --kerberos (Kerberos @ Pass the ccache)
# Steps to get .ccache
impacket-getTGT -dc-ip 10.10.10.10 -hashes ":b38ff50264b74508085d82c69794a4d8" domain.local/user
export KRB5CCNAME=user.ccache

# Commands (With .ccache)
powerview domain.local/user@10.10.10.10 -k --no-pass

# Commands (Without .ccache)
powerview domain.local/user:'Password123!'@10.10.10.10 -k
  • --pfx

Getting Started

Use Cases

Available Modules

LDAP Operations
GPO
Computer Enumeration
ADCS
Exchange
Domain Trust
Service Accounts
Shadow Credentials
Misc

Web UI

Usage
API Documentation

Integrations

Sponsor

Clone this wiki locally