LDAPDomainDump


Dumping the entire domain data with ldapdomaindump using the credential of the compromised enox user; california

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/heist/ldapdomaindump]
└─$ ldapdomaindump dc01.heist.offsec -u 'HEIST.OFFSEC\enox' -p california -n $IP --no-json --no-grep 
[*] Connecting to host...
[*] Binding to host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finished

Complete

Policy


Computers


Users


enox

Group


None default groups