Commands Overview

pwnAD provides five main LDAP commands for interacting with Active Directory.

Available Commands

Command	Description
add	Add objects or permissions to AD
remove	Remove objects or permissions from AD
get	Retrieve and enumerate AD objects
modify	Modify AD objects and attributes
query	Execute raw LDAP queries

All commands follow the same pattern:

pwnAD [auth options] <command> <subcommand> [arguments]

pwnAD --dc-ip 192.168.1.10 -d domain.local -u admin -p 'Pass!' get users

Each command and subcommand has built-in help:

# Main help
pwnAD -h

# Command help
pwnAD get -h

# Subcommand help
pwnAD get user -h

These options apply to all LDAP commands:

Option	Description
`--dc-ip`	Domain controller IP address
`-d, --domain`	Domain FQDN
`-u, --user`	Username
`-p, --password`	Password
`-H, --hashes`	NT hash (format: `[LM:]NT`)
`--aes-key`	Kerberos AES key
`-k, --kerberos`	Use Kerberos authentication
`-pfx`	PFX certificate file
`-cert` / `-key`	PEM certificate and key files
`--tls`	Use TLS connection
`--port`	LDAP port (default: 389)
`--debug`	Enable debug output
`-i`	Interactive mode