ADTool – Active Directory Domain Listing Tool
ADtool is a neat tool to help you list all the machines that are part of an Active Directory driven domain or network.
It is intended to help pentesters and admins in their day to day work, there are some other tools that can accomplish the work for listing domain servers, but unfortunately all other tools are GUI based, which makes it difficult to script actions based on the ouput and is difficult to export a list of machines.
So this tool is for the work day to day, when you need to get a simple and easy to use list of all machines in a domain.
ADtool doesn’t need any special membership, or user in the desired domain, just be connected on the same network, and information will come to you!.
|
1 |
<code>Usage example. ADtool.exe domain -parameters [-o:file.txt]</code> |
|
1 |
<code>Usage example. ADtool.exe mydomain -vwSDmn [-o:listing.txt]</code> |
You can download ADTool here:
Recent in Hacking Tools:
- Web-Sorrow v1.48 – Version Detection, CMS Identification, Enumeration & Server Scanning Tool
- CrowdRE – Crowdsourced Reverse Engineering Service From CrowdStrike
- XMPPloit – A Tool to Attack XMPP Connections
Related Posts:
- ADN – Win32 Active Directory Navigator
- FTPXerox v1.0 – FTP File Transfer Sniffer
- DNSenum – Domain Information Gathering Tool
Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,794,574 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 992,429 views
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool - 587,573 views


Posted in:


Only problem with this executable is that it doesn’t parse hyphenated domains correctly resulting in a runtime error. Other than that, this is cool. Thanks!
Sir Henry: Ah that’s interesting, I’ll try and let author know and see if he can come out with a fix.
csvde.exe – a tool that comes with Microsoft AD administration pack, ADAM – will do this as well. In fact, it will return any object class, users included.
“net view” one other built-in utility which should let you lists all computer accounts part of a domain.
Syntax: net view /domain:domainname
E.g: net view /domain:darket.corp.com