ldapdomaindump

ldapdomaindump (dirkjanm) authenticates to a Domain Controller over LDAP/LDAPS with any valid domain account and dumps the whole directory - users, groups, computers, domain policy, and trusts - into ready-to-read HTML tables plus machine-parsable JSON and greppable text. It is a fast first-pass inventory when you land your first set of credentials and want an offline overview of the domain before running heavier tooling. Output lands in the directory given with -o (default: current dir). Command Reference: Username: john Password: password123 Domain: test.local Target DC IP: 10.10.10.1

# Dump all domain objects (users, groups, computers, policy, trusts) to HTML/JSON/greppable files
ldapdomaindump -u 'test.local\john' -p password123 -o output_dir ldap://10.10.10.1

Native

Enumeration, Discovery

MITRE

T1087.002

Requires

Username, Password

Services

LDAP

Refs

github.com/dirkjanm/ldapdomaindump

book.hacktricks.xyz/network-services-pentesting/pentesting-ldap

attack.mitre.org/techniques/T1087/002/