windapsearch enumerates users, groups, and computers from a Windows domain through LDAP queries. The following command enumerates all 3 of the above mentioned using provided credentials.
Command Reference:
Target IP: 10.10.10.1
Domain: test.local
Username: test
Password: Welkom01!
Enum Users: -U
Enum Groups: -G
Enum Domain Admins: --da
Enum members of group: -m "Remote Desktop Users"
Enum Computers and resolve DNS: -C -r
python3 windapsearch --dc-ip 10.10.10.1 -u test.local\\test -p Welkom01! -U -G --da -m "Remote Desktop Users" -C -r