AdwsPayloadProbe

Namespace ADPlayground.Network

Assembly ADPlayground

Source ADPlayground/Network/AdwsPayloadProbe.cs:77

Modifiers static

AD Web Services (ADWS) payload probe. Performs a WS-Enumeration request (MS-WSDS LdapQuery dialect) and validates that the server returns at least one directory object. This is a stronger signal than a raw TCP connect on port 9389.

Inheritance

Object
AdwsPayloadProbe

Methods

public static AdwsPayloadProbeResult Probe(String server, TimeSpan timeout, NetworkCredential credential = null, Int32 port = 9389, String path = null, AdwsLdapQuery query = null)

ADPlayground/Network/AdwsPayloadProbe.cs:77

Returns: AdwsPayloadProbeResult

Executes an ADWS payload probe against a server.

Parameters

server System.String requiredposition: 0: Target host name (DNS name or IP).
timeout System.TimeSpan requiredposition: 1: Timeout budget for the overall probe.
credential System.Net.NetworkCredential = null optionalposition: 2: Optional alternate Windows credential for the connection (domain\user or UPN). When null, the current credentials are used.
port System.Int32 = 9389 optionalposition: 3: Target port (default 9389).
path System.String = null optionalposition: 4: Endpoint path (default DefaultEnumerationPath).
query ADPlayground.Network.AdwsLdapQuery = null optionalposition: 5: Optional MS-WSDS LDAP query. When null, the probe attempts a base-scope query against the current domain root. If no domain can be derived, the probe uses a server-default enumeration (no explicit filter).

Inherited Methods

Fields

public const Int32 DefaultPort #

Default ADWS port (9389).

Value: 9389

public const String DefaultEnumerationPath #

Default ADWS WS-Enumeration endpoint path.

Value: ActiveDirectoryWebServices/Windows/Enumeration

public const String DefaultInstance #

Default ADWS instance name (AD DS typically uses ldap:389).

Value: ldap:389