Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

adidnsdump

Noise: RESTRICTED_ACCESS_BLUR_MARKER

AD Enumeration

Domain Enumeration

adidnsdump queries Active Directory integrated DNS data through LDAP and exports zone records to CSV. It can optionally resolve names hidden from the LDAP read using DNS A queries. The author describes the activity as similar to a zone transfer, but it does not perform DNS AXFR. The current source exports A, AAAA, CNAME, NS, and PTR records; the README's broader 'all records' description should not be read as support for every DNS record type.

Source

https://github.com/dirkjanm/adidnsdump

Language

Python

References

github.com raw.githubusercontent.com raw.githubusercontent.com raw.githubusercontent.com dirkjanm.io

+5 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER