Catalog WADComs

WAD · Tool

LDAPSearch

2 techniques Linux · ActiveDirectory · WindowsWADComs GPL-3.0

LDAPSearch-Creds

Enumeration LinuxActiveDirectoryWindows

ldapsearch is a Linux based tool that opens a connection to an LDAP server, binds, and performs a search using specified parameters. The following command will attempt to find sensitive information (such as leaked creds), by querying all LDAP objects, essentially dumping all the data that an anonymous user can access. Command Reference: Domain: test.local Username: ldap Password: password123

ldapsearch -h test.local -D 'ldap@test.local' -w password123 -b 'dc=test,dc=local'
Native
Enumeration
Requires
Username, Password
Services
LDAP

LDAPSearch-NoCreds

Enumeration LinuxActiveDirectoryWindows

ldapsearch is a Linux based tool that opens a connection to an LDAP server, binds, and performs a search using specified parameters. The following command will attempt to find sensitive information (such as leaked creds), by querying all LDAP objects, essentially dumping all the data that an anonymous user can access. Command Reference: Domain: test.local

ldapsearch -LLL -x -H ldap://test.local -b'' -s base '(objectclass=\*)'
Native
Enumeration
Requires
No_Creds
Services
LDAP