$ git clone https://github.com/AidenPearce369/ADReaper
$ cd ADReaper/
$ go build

PS C:\Users\redteamer\Desktop\shared> .\ADReaper.exe

      -command string

            Command to run
                  dc              - to list domain controllers
                  domain-trust    - to list domain trust
                  users           - to list all users
                  computers       - to list all computers
                  groups          - to list all groups with members
                  spn             - to list service principal objects
                  never-loggedon  - to list users never logged on
                  gpo             - to list group policy objects
                  ou              - to list organizational units
                  ms-sql          - to list MS-SQL servers
                  asreproast      - to list AS-REP roastable accounts
                  unconstrained   - to list Unconstrained Delegated accounts
                  admin-priv      - to list AD objects with admin privilege

      -dc string

            Enter the DC

      -filter string

            Filters to use for users/groups/computers

            list - lists all objects only
            full-data - list all objects with properties
            membership - lists all members from an object

            (default "list")
      -name string

            Pass object name of user/group/computer

      -password string

            Enter the Password

      -user string

            Enter the Username

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command dc

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command domain-trust

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command users

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command users -filter full-data

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command users -name <user>

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command users -name <user> -filter membership

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command computers

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command computers -filter full-data

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command computers -name <computer name>

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command groups

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command groups -filter full-data

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command groups -name <group name>

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command groups -name <group name> -filter membership

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command never-loggedon

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command gpo

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command ou

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command admin-priv

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command ms-sql

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command ms-sql -filter full-data

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command ms-sql -name <computer name> 

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command spn

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command spn -name <sam of spn>

.\ADReaper.exe -dc <dc.domain> -user <username> -password <password> -command unconstrained