Skip to content

Extract all users from an Active Directory domain to an Excel worksheet.

Notifications You must be signed in to change notification settings

p0dalirius/DomainUsersToXLSX

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Extract all users from an Active Directory domain to an Excel worksheet.
GitHub release (latest by date)

Features

  • Extract all domain users to Excel worksheet with filters on columns

Usage

$ ./DomainUsersToXLSX.py 
DomainUsersToXLSX v1.2 - by @podalirius_

usage: DomainUsersToXLSX.py [-h] [-ts] [--use-ldaps] [-q] [-debug] [-no-colors] [-o OUTPUT_FILE] --dc-ip ip address [-d DOMAIN] [-u USER]
                            [--no-pass | -p PASSWORD | -H [LMHASH:]NTHASH | --aes-key hex key] [-k]

Extract all users from an Active Directory domain to an Excel worksheet.

options:
  -h, --help            show this help message and exit
  -ts                   Adds timestamp to every logging output
  --use-ldaps           Use LDAPS instead of LDAP
  -q, --quiet           Show no information at all.
  -debug                Debug mode.
  -no-colors            Disables colored output mode
  -o OUTPUT_FILE, --output-file OUTPUT_FILE
                        Output file to store the results in. (default: accounts.xlsx)

authentication & connection:
  --dc-ip ip address    IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If omitted it will use the domain part (FQDN)
                        specified in the identity parameter
  -d DOMAIN, --domain DOMAIN
                        (FQDN) domain to authenticate to
  -u USER, --user USER  user to authenticate with

  --no-pass             Don't ask for password (useful for -k)
  -p PASSWORD, --password PASSWORD
                        Password to authenticate with
  -H [LMHASH:]NTHASH, --hashes [LMHASH:]NTHASH
                        NT/LM hashes, format is LMhash:NThash
  --aes-key hex key     AES key to use for Kerberos Authentication (128 or 256 bits)
  -k, --kerberos        Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials
                        cannot be found, it will use the ones specified in the command line

Demonstration

This gives us the following Excel file:

Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.