|
# LDAP
|
|
|
|
## Get Domain
|
|
|
|
```sh
|
|
ldapsearch -x -h $TARGET_IP -s base namingcontexts
|
|
```
|
|
|
|
## Domain Dump
|
|
|
|
* If a set of credentials are known via
|
|
```sh
|
|
ldapdomaindump $TARGET_IP -u '<domain>\<user>' -p '<password>' --no-json --no-grep
|
|
```
|
|
* Take a look at the genreated HTML files
|