Documentation Index
Fetch the complete documentation index at: https://mintlify.com/the-useless-one/pywerview/llms.txt
Use this file to discover all available pages before exploring further.
get-dfsshare queries the domain controller via LDAP to enumerate all Distributed File System (DFS) share objects registered in the domain. DFS namespaces allow organisations to publish shared network paths that are transparently load-balanced and replicated across multiple servers, making them a valuable source of information during Active Directory reconnaissance — DFS targets often host sensitive internal resources, and the namespace roots reveal the underlying file server infrastructure. The command supports both DFS version 1 (msDFS-Namespacev1) and version 2 (msDFS-Namespacev2) objects, querying both by default.
get-dfsshare uses the standard ad_parser for authentication and requires a domain controller IP (-t/--dc-ip). It does not support certificate-based or --simple-auth authentication modes.Flags
IP address of the domain controller to target.
Name of the domain to authenticate with (e.g.
contoso.com).Username used to connect to the domain controller.
Password associated with the specified username.
NTLM hashes for pass-the-hash authentication. Format:
[LMHASH:]NTHASH. The LM portion can be omitted or zeroed out.Use Kerberos authentication. Reads credentials from the ccache file pointed to by
KRB5CCNAME. Falls back to the provided username and password if no valid ticket is found.Force a TLS (LDAPS) connection to the domain controller.
Logging verbosity sent to stderr. Choices:
CRITICAL (default), WARNING, DEBUG, ULTRA.Print results as JSON instead of the default human-readable format.
Domain to query. Defaults to the domain inferred from the credentials or the target DC.
DFS version(s) to query. Accepted values:
v1, v2. Pass one or both. Defaults to querying both v1 and v2 when not specified.Additional ADS path to restrict the LDAP search base.