killchain-compendium/enumeration/docs/ldap.md

LDAP

Get Domain

 ldapsearch -x -h $TARGET_IP -s base namingcontexts

Domain Dump

• If a set of credentials are known via

ldapdomaindump $TARGET_IP  -u '<domain>\<user>' -p '<password>' --no-json --no-grep

• Take a look at the genreated HTML files