https://github.com/p0dalirius/domainuserstoxlsx

Extract all users from an Active Directory domain to an Excel worksheet.
https://github.com/p0dalirius/domainuserstoxlsx

accounts active-directory administration audit excel extract pentest system xlsx

Last synced: 7 days ago
JSON representation

Extract all users from an Active Directory domain to an Excel worksheet.

• Host: GitHub
• URL: https://github.com/p0dalirius/domainuserstoxlsx
• Owner: p0dalirius
• Created: 2022-05-19T11:24:30.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2024-04-02T16:04:15.000Z (9 months ago)
• Last Synced: 2024-12-18T18:50:12.963Z (19 days ago)
• Topics: accounts, active-directory, administration, audit, excel, extract, pentest, system, xlsx
• Language: Python
• Homepage: https://podalirius.net/
• Size: 302 KB
• Stars: 33
• Watchers: 2
• Forks: 6
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml

Awesome Lists containing this project

README

        
![](./.github/banner.png)



  Extract all users from an Active Directory domain to an Excel worksheet. 

  


  

  

  




## Features

 - [x] Extract all domain users to Excel worksheet with filters on columns

## Usage

```

$ ./DomainUsersToXLSX.py 

DomainUsersToXLSX v1.2 - by @podalirius_

usage: DomainUsersToXLSX.py [-h] [-ts] [--use-ldaps] [-q] [-debug] [-no-colors] [-o OUTPUT_FILE] --dc-ip ip address [-d DOMAIN] [-u USER]

                            [--no-pass | -p PASSWORD | -H [LMHASH:]NTHASH | --aes-key hex key] [-k]

Extract all users from an Active Directory domain to an Excel worksheet.

options:

  -h, --help            show this help message and exit

  -ts                   Adds timestamp to every logging output

  --use-ldaps           Use LDAPS instead of LDAP

  -q, --quiet           Show no information at all.

  -debug                Debug mode.

  -no-colors            Disables colored output mode

  -o OUTPUT_FILE, --output-file OUTPUT_FILE

                        Output file to store the results in. (default: accounts.xlsx)

authentication & connection:

  --dc-ip ip address    IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If omitted it will use the domain part (FQDN)

                        specified in the identity parameter

  -d DOMAIN, --domain DOMAIN

                        (FQDN) domain to authenticate to

  -u USER, --user USER  user to authenticate with

  --no-pass             Don't ask for password (useful for -k)

  -p PASSWORD, --password PASSWORD

                        Password to authenticate with

  -H [LMHASH:]NTHASH, --hashes [LMHASH:]NTHASH

                        NT/LM hashes, format is LMhash:NThash

  --aes-key hex key     AES key to use for Kerberos Authentication (128 or 256 bits)

  -k, --kerberos        Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials

                        cannot be found, it will use the ones specified in the command line

```

## Demonstration

![](./.github/extract.png)

This gives us the following Excel file:

![](./.github/excel.png)

## Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.