ldap_search v0.1 releases: perform LDAP queries and enumerate users, groups, and computers from Windows Domains

LDAP_Search

LDAP_Search can be used to enumerate Users, Groups, Computers, Domain Policies, and Domain Trusts within a Windows environment. Authentication can be performed using traditional username and password, or NTLM hash. In addition, this tool has been modified to allow brute force/password-spraying via LDAP.

Ldap_Search is compatible with Python 2.7 / 3.6+ and makes use of the Impacket library to perform the main operations.

Installation

git clone --recursive https://github.com/m8r0wn/ldap_search
cd ldap_search
sudo chmod +x setup.sh
sudo ./setup.sh

Usage

Enumerate all active users on a domain:

Lookup a single user and display field headings:

Enumerate all computers on a domain:

Search for an end of life systems on the domain:

Enumerate all groups on the domain:

Query group members:

Queries

Below are the query options that can be specified using the “-q” argument:

User

  active / [None] - All active users (Default)

  all - All users, even disabled

  [specific account or email] - lookup user, ex. "m8r0wn"

  

group

  [None] - All domain groups

  [Specific group name] - lookup group members, ex. "Domain Admins"

 

computer

  [None] - All Domain Computers

  eol - look for all end of life systems on domain

Copyright (C) 2018 m8r0wn

Source: https://github.com/m8r0wn/