adinfo-enum

Enumerate Active Directory topology, policies, and configurations via Adinfo.

1.6k|234|Updated Dec 7, 2019
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill adinfo-enum
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: adinfo-enum
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/adinfo-enum
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill adinfo-enum

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

当获得域用户凭据后需要快速收集域环境信息时,此技能提供快速、全面的域信息枚举能力。

Core Features & Use Cases

  • 一条命令输出域控主机、域管用户、信任关系、GPO、SPN、委派、AS-REP、OU 结构等关键信息。
  • 提供域名、域 SID、功能级别等基本信息的集中视图,降低手动 LDAP 查询成本。
  • 实战流程:在获得凭据后快速完成全景信息收集,为后续横向移动和权限提升提供情报。

Quick Start

Run adinfo-enum with domain credentials to obtain a full panorama of the AD environment.

Frequently Asked Questions about adinfo-enum

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate Active Directory domain controllers and trust relationships with domain credentials?

You can enumerate Active Directory domain controllers, trust relationships, and domain admins by running a single Adinfo command after obtaining valid domain credentials, producing a comprehensive overview of the domain topology.

What Active Directory information can I collect quickly after obtaining domain user credentials?

After obtaining domain credentials, you can quickly collect Active Directory information including domain SID, functional level, DC list, admin groups, trusts, password policy, SPNs, delegation, AS-REP, GPOs, OU structure, and computer accounts in one command.

Does domain enumeration via Adinfo require any additional dependencies or components?

No additional dependencies or components are required to perform domain enumeration via Adinfo, as long as you have valid domain credentials to authenticate and query the Active Directory environment.

Can I gather Group Policy Objects and OU structure from Active Directory using a single command?

Yes, you can gather Group Policy Objects and OU structure from Active Directory using a single Adinfo command, which outputs comprehensive policy and organizational unit configurations alongside domain trust and delegation settings.

What is the best way to collect SPN accounts and delegation settings across an Active Directory environment?

The best way to collect SPN accounts and delegation settings across an Active Directory environment is using Adinfo, which retrieves these configurations alongside AS-REP settings and domain admin groups in a single enumeration pass.

Why does manual LDAP querying fail to provide a quick panoramic view of Active Directory configurations?

Manual LDAP querying fails to provide a quick panoramic view because it requires constructing individual queries for domain controllers, trusts, GPOs, and SPNs, whereas Adinfo consolidates all Active Directory topology and policy enumeration into one command.

Related Skills