LDAPDomainDump


Dumping the domain information with ldapdomaindump, using the credential of the fmcsorley user.

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/hutch/ldapdomaindump]
└─$ ldapdomaindump hutchdc.hutch.offsec -u 'HUTCH.OFFSEC\fmcsorley' -p 'CrabSharkJellyfish192' -n hutchdc.hutch.offsec --no-json --no-grep                   
[*] Connecting to host...
[*] Binding to host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finished

Complete

Domain Computers


HUTCHDC$

Domain Users


The CLEARTEXT password of the fmcsorley user can be seen in the description field

Domain Groups


Defaults N/A