ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.
cd basicrecon/
x86_64-w64-mingw32-gcc -c basicrecon.c -o basicrecon.x64.o
cd query/
x86_64-w64-mingw32-gcc -c query.cpp -o query.x64.o
Then load the ADSIsearch.cna script into Cobalt Strike.
Using basicrecon:
ADSIsearch basicrecon
Using query:
ADSIsearch query <LDAP Query> <Optional Filter>
ADSIsearch query (objectCategory=user) samaccountname
My BOF is heavily based off of Microsoft's example code and Outflank's Recon-AD project. I made this BOF to better understand how these tools worked and also use different parts from both projects to produce what I was looking for. You can also learn more about these different APIs here: