ADTool – Active Directory Domain Listing Tool
ADtool is a neat tool to help you list all the machines that are part of an Active Directory driven domain or network.
It is intended to help pentesters and admins in their day to day work, there are some other tools that can accomplish the work for listing domain servers, but unfortunately all other tools are GUI based, which makes it difficult to script actions based on the ouput and is difficult to export a list of machines.
So this tool is for the work day to day, when you need to get a simple and easy to use list of all machines in a domain.
ADtool doesn’t need any special membership, or user in the desired domain, just be connected on the same network, and information will come to you!.
Usage example. ADtool.exe domain -parameters [-o:file.txt]Usage example. ADtool.exe mydomain -vwSDmn [-o:listing.txt]You can download ADTool here:
Tweet
Posted in: 
Recent in Hacking Tools:
- Arachni v0.4 Released – High-Performance (Open Source) Web Application Security Scanner Framework
- Patator – Multi Purpose Brute Forcing Tool
- MySQLPasswordAuditor – Free MySQL Audit/Password Recovery & Cracking Tool
Related Posts:
- ADN – Win32 Active Directory Navigator
- FTPXerox v1.0 – FTP File Transfer Sniffer
- DNSenum – Domain Information Gathering Tool
Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,630,866 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 899,232 views
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool - 505,323 views
Only problem with this executable is that it doesn’t parse hyphenated domains correctly resulting in a runtime error. Other than that, this is cool. Thanks!
Sir Henry: Ah that’s interesting, I’ll try and let author know and see if he can come out with a fix.
csvde.exe – a tool that comes with Microsoft AD administration pack, ADAM – will do this as well. In fact, it will return any object class, users included.
“net view” one other built-in utility which should let you lists all computer accounts part of a domain.
Syntax: net view /domain:domainname
E.g: net view /domain:darket.corp.com