CatalogWADComs

WAD · Tool

LDAPSearch

2 techniquesLinux · ActiveDirectory · WindowsWADComsGPL-3.0

LDAPSearch-Creds

EnumerationLinuxActiveDirectoryWindows

ldapsearch is a Linux based tool that opens a connection to an LDAP server, binds, and performs a search using specified parameters. The following command will attempt to find sensitive information (such as leaked creds), by querying all LDAP objects, essentially dumping all the data that an anonymous user can access. Command Reference: Domain: test.local Username: ldap Password: password123 

ldapsearch -h test.local -D 'ldap@test.local' -w password123 -b 'dc=test,dc=local'
Evidence
Upstream reference
Environment
Active Directory
Native
Enumeration
Requires
Username, Password
Services
LDAP

LDAPSearch-NoCreds

EnumerationLinuxActiveDirectoryWindows

ldapsearch is a Linux based tool that opens a connection to an LDAP server, binds, and performs a search using specified parameters. The following command will attempt to find sensitive information (such as leaked creds), by querying all LDAP objects, essentially dumping all the data that an anonymous user can access. Command Reference: Domain: test.local 

ldapsearch -LLL -x -H ldap://test.local -b'' -s base '(objectclass=\*)'
Evidence
Upstream reference
Environment
Active Directory
Native
Enumeration
Requires
No credentials
Services
LDAP