the_open_door
coffee
ESEN
← Tools

ldapsearch

LDAP queries against a domain directory.

An LDAP client to query a domain directory. With an anonymous bind or credentials it dumps objects and attributes (users, groups, descriptions); passwords often turn up in attributes like description or userPassword. The basis of manual AD enumeration.

Family Active Directory enumeration

Flags -x -H -b -D -w -s base

Concepts BloodHound

Cheatsheet Enumeration

Installation

sudo apt install -y ldap-utils

Useful commands4 commands

Appears in

Some machines where its use is documented; not an exhaustive list.