bloodyAD remove object

Delete an arbitrary AD object you have rights on. Cleanup step for accounts/computers you created mid-engagement, or destructive action against attacker-owned scratch objects.

Tool
bloodyAD
Category
Post-Exploitation / AD Object Manipulation
Platform
linux
Requires
password
Protocols
LDAP

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

bloodyAD --host <dc-ip> -d '<domain>' -u '<user>' -p '<password>' remove object '<dn>'

Examples

bloodyAD --host 10.10.10.10 -d corp.local -u admin -p 'Password123!' remove object 'CN=pwndmsa,CN=Managed Service Accounts,DC=corp,DC=local'

Tags

bloodyad cleanup ldap