.. / adexplorer.exe

Advanced Active Directory (AD) viewer and editor

• https://blog.bitsadmin.com/dealing-with-large-bloodhound-datasets
• https://github.com/c3c/ADExplorerSnapshot.py
• https://github.com/lkarlslund/Adalanche

Domain

Interactively browse LDAP

adexplorer.exe

• Via File -> Connect, connect to a domain controller
• If adexplorer is running in the context of a domain, the “Connect to” field can be left empty as it automatically connects to a DC of the current domain
• When User and Password fields are left empty, Kerberos authentication is used

Obtain dump of Active Directory over TLS

adexplorer.exe -snapshot ad.bitsadmin.com:636 ad.bitsadmin.com.dat

• Can be viewed offline using ADExplorer
• Can also be imported to BloodHound format using ADExplorerSnapshot.py or to Adalanche (see references)

• Port: 389/TCP
• Port: 636/TCP