-
-
Notifications
You must be signed in to change notification settings - Fork 97
Supported Authentication
Muhammad Ali edited this page Mar 28, 2024
·
8 revisions
-
--use-ldap(Port 389)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-ldap-
--use-ldaps(Port 636)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-ldaps-
--use-gc(Port 3268)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-gc-
--use-gc-ldaps(Port 3269)
powerview domain.local/user:'Password123!'@10.10.10.10 --use-gc-ldaps-
-H(Pass the hash)
powerview domain.local/user@10.10.10.10 -H "b38ff50264b74508085d82c69794a4d8" --aes-key
# aes128-cts-hmac-sha1-96
powerview domain.local/user@10.10.10.10 --aes-key "1e7b2dab87d6c796cecaf7187d9e55db"
# aes256-cts-hmac-sha1-9
powerview domain.local/user@10.10.10.10 --aes-key "22bb483611e18c5f350ae00463de646371dda29e59229a4607265fc302e873ab"-
-k @ --kerberos(Kerberos @ Pass the ccache)
# Steps to get .ccache
impacket-getTGT -dc-ip 10.10.10.10 -hashes ":b38ff50264b74508085d82c69794a4d8" domain.local/user
export KRB5CCNAME=user.ccache
# Commands (With .ccache)
powerview domain.local/user@10.10.10.10 -k --no-pass
# Commands (Without .ccache)
powerview domain.local/user:'Password123!'@10.10.10.10 -k--pfx
- Introduction
- Installation
- Supported Authentication
- Cheatsheets
- Obfuscation
- User Defined Rules
- Public Writeups
LDAP Operations
- Get-DomainUser
- Get-DomainComputer
- Get-DomainGroup
- Get-DomainGroupMember
- Get-DomainOU
- Get-Domain
- Get-DomainController
- Get-DomainDNSRecord
- Get-DomainDNSZone
- Get-DomainObject
- Get-DomainObjectAcl
- Get-DomainObjectOwner
- Get-DomainSCCM
- Get-DomainRBCD
- Get-DomainWDS
- Get-LocalUser
- Set-DomainObject
- Set-DomainObjectDN
- Set-DomainObjectOwner
- Set-DomainUserPassword
- Set-DomainComputerPassword
- Set-DomainRBCD
- Set-DomainDNSRecord
- Add-DomainUser
- Add-DomainComputer
- Add-DomainGroup
- Add-DomainGroupMember
- Add-DomainOU
- Add-DomainGPO
- Add-DomainObjectAcl
- Add-DomainDNSRecord
- Remove-DomainUser
- Remove-DomainComputer
- Remove-DomainObject
- Remove-DomainGroupMember
- Remove-DomainOU
- Remove-DomainObjectAcl
- Remove-DomainDNSRecord
- Disable-DomainDNSRecord
- Restore-DomainObject
- Unlock-ADAccount
- Enable-ADAccount
- Disable-ADAccount
- Login-As
- Clear-Cache
Computer Enumeration
- Get-NetSession
- Get-NetShare
- Get-NetLoggedOn
- Get-RegLoggedOn
- Get-NetComputerInfo
- Get-NetTerminalSession
- Get-NetProcess
- Stop-NetProcess
- Get-EventLog
- Get-EventLogChannel
- Get-EventLogPublisher
- Get-NetService
- Start-NetService
- Stop-NetService
- Add-NetService
- Set-NetService
- Remove-NetService
- Stop-Computer
- Restart-Computer
- Remove-NetTerminalSession
- Remove-NetSession
- Logoff-Session