LDAPDomainDump
Dumping the entire domain data with ldapdomaindump using the credential of the compromised enox user; california
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/heist/ldapdomaindump]
└─$ ldapdomaindump dc01.heist.offsec -u 'HEIST.OFFSEC\enox' -p california -n $IP --no-json --no-grep
[*] Connecting to host...
[*] Binding to host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finishedComplete
Policy
/Practice/Heist_OffSec/3-Exploitation/attachments/{07740F21-0A82-48C6-9E69-4DFA5E9727F9}.png)
Computers
/Practice/Heist_OffSec/3-Exploitation/attachments/{A568B912-74D8-43F0-A733-2863D2ADE042}.png)
Users
enox
Group
None default groups