Enumerating User with Ldapsearch and enum4linux - Anonymously

If you are using Windows for your recon, use LDAP tool to do Anonymous/Credentialed LDAP data dump or use ldapsearch in kali as mentioned below:

Add north.newyork.local to your host file:

sudo nano /etc/hosts
# Host addresses
127.0.0.1  localhost
127.0.1.1  parrot
::1        localhost ip6-localhost ip6-loopback
ff02::1    ip6-allnodes
ff02::2    ip6-allrouters
192.168.56.11 north.newyork.local

# Others
ldapsearch -LLL -x -H ldap://north.newyork.local -b '' -s base '(objectclass=*)'

Enum4linux

We can confirm the anonymous listing on the NORTH DC also with Enum4linux.

Last updated