Powermad is a robust toolset specifically engineered for exploiting Active Directory machine account quotas and executing a range of DNS-related tasks. It offers functions to manipulate machine accounts, DNS records, and other components of Active Directory. This toolset is particularly valuable for penetration testers and security professionals seeking to assess and enhance the security of Active Directory environments.
Installation
Installed by copying the module directory to one of the PowerShell module directories. Users are advised to check the official repository or documentation for specific installation instructions.
How to Use
Powermad offers a variety of functions, and here is a basic guide on how to use some of them:
MachineAccountQuotaFunctions:
· Get-MachineAccountAttribute: Retrieve values from a machine account attribute.
· Get-MachineAccountCreator: List usernames or SIDs and their associated machine accounts.
· Disable-MachineAccount: Disable a machine account.
· Enable-MachineAccount: Enable a disabled machine account.
· New-MachineAccount: Add a new machine account.
· Remove-MachineAccount: Remove a machine account.
· Set-MachineAccountAttribute: Set attributes for a machine account.
· Invoke-AgentSmith: Recursively create machine accounts from an unprivileged account.
DNSFunctions:
· Powermad allows manipulation of DNS records in Active Directory-Integrated DNS zones.
DynamicUpdates Functions:
· Invoke-DNSUpdate: Add or delete dynamicDNS records.
ADIDNSFunctions:
· Functions for managing Active Directory-Integrated DNS nodes and zones.
MiscellaneousFunctions:
· Get-KerberosAESKey: Generate Kerberos AES256 and 128 keys from a known username and password.
Additional Information
- For a more in-depth understanding of each function and its usage, refer to the comment-based help in each script/module.
- The official repository on GitHub is likely to have additional information, updates, and any specific instructions.
- Users are encouraged to adhere to the contribution rules and script style guide mentioned in the repository if they plan to contribute to the project.
