ADModule – Microsoft Signed ActiveDirectory PowerShell Module

Microsoft signed DLL for the ActiveDirectory PowerShell moduleJust a backup for the Microsoft’s ActiveDirectory PowerShell module from Server 2016 with RSAT and module installed. The DLL is usually found at this path: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.ActiveDirectory.Managementand the rest of the module files at this path: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\ActiveDirectory\UsageYou can copy this DLL to your machine and use it to enumerate Active Directory without installing RSAT and without having administrative privileges.PS C:> Import-Module C:\ADModule\Microsoft.ActiveDirectory.Management.dll -Verbose To be able to list all the cmdlets in the module, import the module as well. Remember to import the DLL first.PS C:> Import-Module C:\ADModule\Microsoft.ActiveDirectory.Management.dll -VerbosePS C:> Import-Module C:\AD\Tools\ADModule\ActiveDirectory\ActiveDirectory.psd1PS C:> Get-Command -Module ActiveDirectoryBenefitsThere are many benefits like very low chances of detection by AV, very wide coverage by cmdlets (I leave the usage of cmdlets for a later post :P), good filters for cmdlets, signed by Microsoft etc. The most useful one, however, is that this module works flawlessly from PowerShell’s Constrained Language Mode Bloghttps://www.labofapenetrationtester.com/2018/10/domain-enumeration-from-PowerShell-CLM.htmlDownload ADModule

Link: http://www.kitploit.com/2018/11/admodule-microsoft-signed.html