LDAP

We will show how we can gather LDAP information manually and with tools.

Tools

ldapsearch

ldapsearch -H ldap://10.10.10.100/ -x -s base namingcontexts
ldapsearch -H ldap://10.10.10.100/ -x -b "DC=HTB,DC=LOCAL" > ldapOut.txt
ldapsearch -H ldap://10.10.10.100/ -x -b "CN=USERS,DC=HTB,DC=LOCAL" > ldapUsers.txt
ldapsearch -H ldap://10.10.10.100/ -x -b "DC=HTB,DC=LOCAL" '(objectClass=Person)'

netexec

nxc ldap 10.10.10.100 -u 'cub3' -p 'password' --users
nxc ldap 10.10.10.100 -u 'cub3' -p 'password' --groups
PreviousRPCNextSMTP

Last updated