LDAPDomainDump
┌──(kali㉿kali)-[~/…/htb/labs/university/ldapdomaindump]
└─$ ldapdomaindump dc.university.htb -u 'UNIVERSITY.HTB\wao' -p 'WebAO1337' -n $IP --no-json --no-grep
[*] Connecting to host...
[*] Binding to host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finished
Dumping domain information using the credential of the wao
user
Computers
The following additional computer accounts appear valid;
WS-3$
LAB-2$
is a Linux hostGMSA-PClient01$
Groups
Those are the none default groups
Users