adidnsdump

Documentation Index

Fetch the complete documentation index at: https://docs.bytejmp.com/llms.txt

Use this file to discover all available pages before exploring further.

​

Install

pip install adidnsdump

​

Usage

adidnsdump -u 'DOMAIN\user' -p 'password' DC_IP
adidnsdump -u 'DOMAIN\user' -p 'password' DC_IP -r    # Resolve unknown records

​

Include Tombstoned Records

adidnsdump -u 'DOMAIN\user' -p 'password' DC_IP --include-tombstoned

​

Output

cat records.csv

​

With LDAP (Manual)

ldapsearch -x -H ldap://DC_IP -b "DC=domain.local,CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=local" -D "[email protected]" -w 'pass'

​

Why Use It

• Discover internal hosts not in ping sweep
• Find hidden services, dev servers, legacy systems
• Map internal infrastructure via DNS
• Works with any domain user (low privilege)

​

Quick Reference