{"id":27968543,"url":"https://github.com/redsiege/edd","last_synced_at":"2025-06-16T02:36:00.772Z","repository":{"id":39137153,"uuid":"346514358","full_name":"RedSiege/EDD","owner":"RedSiege","description":"Enumerate Domain Data","archived":false,"fork":false,"pushed_at":"2023-09-13T22:38:14.000Z","size":6364,"stargazers_count":327,"open_issues_count":2,"forks_count":58,"subscribers_count":8,"default_branch":"master","last_synced_at":"2025-06-13T14:18:29.189Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RedSiege.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2021-03-10T22:55:21.000Z","updated_at":"2025-05-31T23:32:22.000Z","dependencies_parsed_at":"2023-09-14T13:28:10.389Z","dependency_job_id":null,"html_url":"https://github.com/RedSiege/EDD","commit_stats":null,"previous_names":["redsiege/edd","fortynorthsecurity/edd"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/RedSiege/EDD","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FEDD","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FEDD/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FEDD/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FEDD/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RedSiege","download_url":"https://codeload.github.com/RedSiege/EDD/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FEDD/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260086710,"owners_count":22956850,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-05-07T21:04:16.283Z","updated_at":"2025-06-16T02:36:00.723Z","avatar_url":"https://github.com/RedSiege.png","language":"C#","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![CodeFactor](https://www.codefactor.io/repository/github/whiterabb17/edd/badge/master)](https://www.codefactor.io/repository/github/whiterabb17/edd/overview/master)\n\n# EDD\nEnumerate Domain Data is designed to be similar to PowerView but in .NET. PowerView is essentially the ultimate domain enumeration tool, and we wanted a .NET implementation that we worked on ourselves. This tool was largely put together by viewing implementations of different functionality across a wide range of existing projects and combining them into EDD. \n\n# WPF Frontend\n\n\u003cp align=\"center\"\u003e\n\t\u003cimg align=\"center\" src=\"https://raw.githubusercontent.com/whiterabb17/EDD/master/Screenshot.png\"\u003e\n\u003c/p\u003e\n\n## Usage\n\nTo use EDD, you just need to call the application, provide the function that you want to run (listed below) and provide any optional/required parameters used by the function.\n\nArguments:\n\n\t-f, --function=VALUE       the function you want to use\n\t-o, --output=VALUE         the path to the file to save\n\t-c, --computername=VALUE   the computer you are targeting\n\t-n, --canonicalname=VALUE  canonical name for domain user\n\t-d, --domainname=VALUE     the computer you are targeting\n\t-g, --groupname=VALUE      the domain group you are targeting\n\t-p, --processname=VALUE    the process you are targeting\n\t-fd, --filedata=PATH       the path to a file containing data related to the function you are invoking\n\t-w, --password=VALUE       the password to authenticate with or what you are\n\t                           setting it to\n\t-u, --username=VALUE       the domain account you are targeting\n\t-t, --threads=VALUE        the number of threads to run (default: 5)\n\t-q, --query=VALUE          custom LDAP filter to search\n\t-a, --adright=VALUE        Active Directory Rights to return, separated by\n\t                           commas\n\t-s, --search=VALUE         the search term(s) for\n\t                             FindInterestingDomainShareFile separated by a\n\t                             comma (,), accepts wildcards\n\t--sharepath=VALUE      the specific share to search for interesting files\n\t-i, --info                 returns information on a specifed function\n\t-l, --listfunction         returns all available functions\n\n\t-h, --help                 show this message and exit\n\n\n## Functions\n\nThe following functions can be used with the -f flag to specify the data you want to enumerate/action you want to take.\n\n### Forest/Domain Information\n\tgetdomainsid - Returns the domain sid (by default current domain if no domain is provided)\n\tgetforest - returns the name of the current forest\n\tgetforestdomains - returns the name of all domains in the current forest\n\tgetsiddata - Converts a SID to the corresponding group or domain name (use the -u option for providing the SID value)\n\tgetadcsservers - Get a list of servers running AD CS within the current domain\n\n### Computer Information\n\tgetdomaincomputers - Get a list of all computers in the domain\n\tgetdomaincontrollers - Gets a list of all domain controllers\n\tgetdomainshares - Get a list of all domain shares\n\tgetreadabledomainshares - Get a list of all readable domain shares\n\n### User Information\n\tchangeaccountpassword - Change the password for a targeted account\n\tcustomldapquery - Set arbitrary LDAP filter to search for objects\n\tgetuserdacl - Returns DACL of a specified domain object\n\tgetnetlocalgroupmember - Returns a list of all users in a local group on a remote system\n\tgetdomaingroupmember - Returns a list of all users in a domain group\n\tgetdomainuser - Retrieves info about specific user (name, description, SID, Domain Groups)\n\tgetdomaindescriptions - returns domain objects with non-standard account descriptions\n\tgetnetsession - Returns a list of accounts with sessions on the targeted system\n\tgetnetloggedon - Returns a list of accounts logged into the targeted system\n\tgetuserswithspns - Returns a list of all domain accounts that have a SPN associated with them\n\tgetdomaingroupsid - Fetch the SID of a group\n\tgetdomainsid - Fetch SID of domain\n\tgetsiddata - Return username from SID\n\tjoingroupbysid - Join an account to a group via the group's sid\n\tjoingroupbyname - Join an account to a group via the group's name\n\n### Chained Information\n\tfindadminsch - Uses the task scheduler to query for admin rights within a domain\n\tfindadminwmi - Uses WMI to search for admin rights within a domain\n\tfinddomainprocess - Search for a specific process across all systems in the domain (requires admin access on remote systems)\n\tfinddomainuser - Searches the domain environment for a specified user or group and tries to find active sessions (default searches for Domain Admins)\n\tfindemptysystem - Searches the domain for systems with no user account logged into it\n\tfindinterestingdomainsharefile - Searches the domain environment for all accessible shares. Once found, it parses all filenames for \"interesting\" strings\n\tfindwritableshares - Enumerates all shares in the domain and then checks to see if the current account can create a text file in the root level share, and one level deep.\n\n\n## References\n\tPowerView - https://github.com/PowerShellMafia/PowerSploit/blob/master/Recon/PowerView.ps1\n\tCSharp-Tools - https://github.com/RcoIl/CSharp-Tools\n\tStackOverflow - Random questions (if this isn't somehow listed as a reference, we know we're forgetting it :))\n\tSharpView - https://github.com/tevora-threat/SharpView\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredsiege%2Fedd","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fredsiege%2Fedd","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredsiege%2Fedd/lists"}