One Day Sec

How does the lightweight C# tool SharpADFindDemo help avoid antivirus detection?

SharpADFindDemo is a custom C# tool that leverages the `System.DirectoryServices` namespace to query Active Directory, making it less likely to be flagged by antivirus compared to popular tools like PowerView or SharpView. It can be compiled directly on a target system using `csc.exe` and supports exporting users, computers, groups, and OUs. The tool is designed based on AdFind functionality and serves as a template for integrating more advanced features. For a deeper understanding of similar gathering techniques, see the original article Penetration Basics - Active Directory Information Gathering 2: Bypass AV.
C# toolSharpADFindDemoSystem.DirectoryServicesbypass antivirus.Net compilationAD query

Browse all Q&A →