389, 636, 3268 - LDAP(S)

ldapsearch

ldapsearch -LLL -x -H ldap://10.10.10.10 -b '' -s base '(objectclass=*)' | grep naming
ldapsearch -x -H ldap://10.10.10.10 -b 'lanz.com'

ldapdomaindump

python3 ldapdomaindump.py -u 'freed-om-corp.com\carlos.villamizar' -p 'NastAsya4475' 10.10.10.10

It will create a lot of .html files, we serve them to obtain:

Previous445 - SMBNextEnumeration

Last updated