# LDAP

## Get Domain

```sh
 ldapsearch -x -h $TARGET_IP -s base namingcontexts
```

## Domain Dump

* If a set of credentials are known via
```sh
ldapdomaindump $TARGET_IP  -u '<domain>\<user>' -p '<password>' --no-json --no-grep
```
* Take a look at the genreated HTML files