LDAPDomainDump


┌──(kali㉿kali)-[~/…/htb/labs/university/ldapdomaindump]
└─$ ldapdomaindump dc.university.htb -u 'UNIVERSITY.HTB\wao' -p 'WebAO1337' -n $IP --no-json --no-grep
[*] Connecting to host...
[*] Binding to host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finished

Dumping domain information using the credential of the wao user

Computers


The following additional computer accounts appear valid;

  • WS-3$
  • LAB-2$ is a Linux host
  • GMSA-PClient01$

Groups


Those are the none default groups

Users