Active Directory information dumper via ADWS (Active Directory Web Services).
Recommended install:
pipx install git+https://github.com/mverschu/adwsdomaindump
# or
pipx install .adwsdomaindump -u 'thewoods.local\mathijs.verschuuren' -p 'password' -n 10.10.10.1 dc01.thewoods.local
[*] Connecting to ADWS host...
[+] ADWS port 9389 is reachable
[*] Binding to ADWS host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finishedUse --force to skip the ADWS port connectivity check.
Currently tested against:
| EDR | Bypassed |
|---|---|
| Microsoft Defender for Endpoint | Yes |
| CrowdStrike Falcon | Yes |
This project is a fork/adaptation of ldapdomaindump by Dirk-jan Mollema, converted to use ADWS instead of LDAP.
Original work: Copyright (c) 2017 Dirk-jan Mollema
MIT
