# 389, 636, 3268 - LDAP(S)

## ldapsearch

```bash
ldapsearch -LLL -x -H ldap://10.10.10.10 -b '' -s base '(objectclass=*)' | grep naming
ldapsearch -x -H ldap://10.10.10.10 -b 'lanz.com'
```

## ldapdomaindump

```bash
python3 ldapdomaindump.py -u 'freed-om-corp.com\carlos.villamizar' -p 'NastAsya4475' 10.10.10.10
```

It will create a lot of `.html` files, we serve them to obtain:

<figure><img src="https://344105405-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MFJ8sxzGfhnecDpAjrc%2Fuploads%2FODLRSP47zBS3pNOjn8Je%2Fimage.png?alt=media&#x26;token=d3e38266-ad13-48aa-bbc3-79062a7472a2" alt=""><figcaption></figcaption></figure>