PyLDAPmonitor

ldapmonitor.py allows you to monitor creation, deletion and changes to LDAP objects live during your pentest. Command Reference: Target IP: 10.10.10.1 Attacker IP: 10.10.10.2 Domain: test.local Username: john Password: password123

python3 ldapmonitor.py -u 'john' -d 'TEST.local' -p 'password123' --dc-ip 10.10.10.1

Evidence

Upstream reference

Environment

Active Directory

Native

Enumeration

Requires

Password, Username, NTLM hash

Services

LDAP, Kerberos, NTLM

Refs

github.com/p0dalirius/LDAPmonitor/tree/master/python