Vault_LDAPDomainDump

LDAPDomainDump

---

Now that I have a valid domain credential, I will be able to authenticate to the target LDAP server to retrieve the entire domain data

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/vault/ldapdomaindump]
└─$ ldapdomaindump dc.vault.offsec -u 'VAULT.OFFSEC\anirudh' -p 'SecureHM' -n $IP --no-json --no-grep    
[*] Connecting to host...
[*] Binding to host
[+] Bind OK
[*] Starting domain dump
[+] Domain dump finished

Dumping domain information with ldapdomaindump

Computers

---

DC$

Users

---

The anirudh user is part of Server Operators and Remote Management Users groups

Groups

---

All default