search
HomeGitHubPortfolioTwitter/XMediumCont@ct

3.2.1 - LDAP & DNS Enum

hashtag
LDAP Enumeration

hashtag
LdapSearch

Perform anonymous or credentialed enumeration of the LDAP directory:

ldapsearch -H ldap://192.168.1.1 -x -s base namingcontexts
ldapsearch -H ldap://192.168.1.1 -D 'jdoe@DC.LOCAL' -w 'Password123' -x -b "DC=DC,DC=LOCAL"

hashtag
LdapDomainDump

Dump LDAP data in JSON and HTML formats for easier analysis:

ldapdomaindump -u 'DC.LOCAL\jdoe' -p 'Password123' 192.168.1.1

hashtag
DNS Enumeration

Resolve DNS name using nslookup for retrieving useful info regarding target:

nslookup -type=SRV DC.LOCAL
Previous3.2 - Common Services EnumNext3.2.2 - SMB Enum & Common Attacks

Last updated