16 lines
278 B
Markdown
16 lines
278 B
Markdown
|
# LDAP
|
||
|
|
|
||
|
|
## Get Domain
|
||
|
|
|
||
|
|
```sh
|
||
|
|
ldapsearch -x -h $TARGET_IP -s base namingcontexts
|
||
|
|
```
|
||
|
|
|
||
|
|
## Domain Dump
|
||
|
|
|
||
|
|
* If a set of credentials are known via
|
||
|
|
```sh
|
||
|
|
ldapdomaindump $TARGET_IP -u '<domain>\<user>' -p '<password>' --no-json --no-grep
|
||
|
|
```
|
||
|
|
* Take a look at the genreated HTML files
|