---
id: 8132
title: "Dumping Active Directory Domain Info – with PowerUpSQL!"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/dumping-active-directory-domain-info-with-powerupsql/"
published_at: "2018-05-31T00:00:00Z"
tags: ["active-directory", "red-team", "recon", "ldap", "sql-server", "powerupsql", "adsi"]
phying_url: "https://phying.com/item/8132"
lang: en
---

# Dumping Active Directory Domain Info – with PowerUpSQL!

## Summary

Thomas Elling demonstrates querying Active Directory through SQL Server's OLE DB ADSI provider with OPENQUERY and OPENROWSET, adding new PowerUpSQL functions that automate AD recon from SQL servers.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2018-05-31T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/dumping-active-directory-domain-info-with-powerupsql/
- **Phying News:** https://phying.com/item/8132