SharpLDAPmonitor

SharpLDAPmonitor.exe allows you to monitor creation, deletion and changes to LDAP objects live during your pentest. Command Reference: Target IP: 10.10.10.1 Attacker IP: 10.10.10.2 Domain: test.local Username: john Password: password123

SharpLDAPmonitor.exe /dcip:10.10.10.1 /user:TEST.local\john /pass:password123

Evidence

Upstream reference

Environment

Active Directory

Native

Enumeration

Requires

Password, Username

Services

LDAP, Kerberos, NTLM

Refs

github.com/p0dalirius/LDAPmonitor/tree/master/csharp