LDAPDomainDump
Dump domain information via LDAP into HTML, JSON, and grep-friendly formats
- Tool
- ldapdomaindump
- Category
- Enumeration / LDAP
- Platform
- linux
- Requires
- password
- Protocols
- LDAP
Syntax
Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.
ldapdomaindump -u '<domain>\<user>' -p '<password>' <ip> -o ldapdomaindump/
Credential variants
The same attack using a different authentication material.
NTLM Hash requires NTLM hash
ldapdomaindump -u '<domain>\<user>' -p ':<hash>' <ip> -o ldapdomaindump/
Examples
ldapdomaindump -u 'corp.local\user' -p 'password' 192.168.1.100 -o ldapdomaindump/
Tags
Related commands
- BloodHound AD Collection Collect Active Directory data for BloodHound analysis
- bloodyAD get children List the immediate children of a container or OU. Handy for walking the directory tree…
- bloodyAD get dnsDump Dump every AD-integrated DNS record from the domain. Authenticated users can read most…
- bloodyAD get membership Recursively resolve every group a principal belongs to, including nested groups. Faster…
- bloodyAD Get Object Attributes Read all (or specific) LDAP attributes of an AD object. Useful for confirming…
- bloodyAD get search Run an arbitrary LDAP filter against the directory and pull selected attributes. The…
- bloodyAD get trusts Enumerate domain and forest trust relationships, including direction, type, and trust…
- bloodyAD get writable Enumerate every AD object the current principal can write to — fastest path to finding…