Access_LDAPDomainDump

LDAPDomainDump

---

Using the credential of the svc_mssql account, I can use ldapdomaindump to get an overview about the target domain.

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/access/ldapdomaindump]
└─$ ldapdomaindump server.access.offsec -u 'ACCESS.OFFSEC\svc_mssql' -p 'trustno1' -n server.access.offsec --no-json --no-grep 
[*] Connecting to host...
[*] Binding to host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finished

Complete

Computers

---

Users

---