Skip to content

Commit 3413f0d

Browse files
authored
Update README with verification steps for DNS records
Added instructions for verifying low-privilege DNS record creation.
1 parent 135ed92 commit 3413f0d

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -589,12 +589,14 @@ Usage:
589589
`\Test-ADDnsLowPrivWrite.ps1 -DcHost dc.xxx.net -UseSSL -Port 636 -DomainNC 'DC=xxx,DC=net' -Verbose`
590590

591591
You can verify via ADWS in case of output: "[FAIL] VULNERABLE: low-priv add succeeded (record created)."
592+
592593
`
593594
$zoneDn = 'DC=xxx.net,CN=MicrosoftDNS,CN=System,DC=aimfire,DC=net'
594595
$label = '_aclvtest-XXX' <= Change this
595596
$server = 'dc.xxx.net'
596597
Get-ADObject -Server $server -LDAPFilter "(dc=$label)" -SearchBase $zoneDn -SearchScope Subtree -Properties dc,dnsRecord,whenCreated,whenChanged,distinguishedName | Format-List distinguishedName,dc,whenCreated,whenChanged
597598

599+
598600
distinguishedName : DC=_aclvtest-XXX,DC=xxx.net,CN=MicrosoftDNS,CN=System,DC=aimfire,DC=net
599601
dc : _aclvtest-XXX
600602
whenCreated : 1/19/2026 12:56:35 PM

0 commit comments

Comments
 (0)