ad-ldap-enum

ad-ldap-enum copied to clipboard

This repository should consider moving to `ldap3` over `python-ldap` as ldap3 is entirely Python-based while python-ldap is Python/C. python-ldap does not work easily on Windows which causes this tool to...

Zamanry

Large Group Parsing Error

3

Ran the following: `python3 ad-ldap-enum.py -l -d -u -p ` 

3x14

Unable to Bind Output

1

If the tool is unable to bind through a null/authenticated or insecure/secure LDAP connection, the tool outputs an error rather than a statement stating "Unable to bind to requested LDAP...

Zamanry

Critical extension is unavailable

1

Queried our LDAP server. Got this: ldap.UNAVAILABLE_CRITICAL_EXTENSION: {'desc': 'Critical extension is unavailable'} Quick Google search turns up: http://blogs.adobe.com/apugalia/ldap-error-code-12-unavailable-critical-extension/ https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec439052.html ...commonly occurs when asking an LDAP Server to return paged results...

bill-e-ghote

Empty results

5

``` # ad-ldap-enum -d 'example.com' -l 'ldap.forumsys.com' -n ; cat ./* 2017-04-17 00:00:00 INFO Querying users 2017-04-17 00:00:00 INFO Querying groups 2017-04-17 00:00:00 INFO Querying computers 2017-04-17 00:00:00 INFO Building...

vdun

More user attributes

4

Can we have a flag to pull the full list of LDAP attributes for users? I find myself wanting more information, but not sure it is worth trying to narrow...

jmmcatee

The methods get_password_last_set_date and get_last_logon_date are duplicating code. Calculating time-stamps should be made generic to allow for future expansion.

edepree

When values are not found, ad-ldap-enum sometimes outputs rows with different numbers of columns, instead of outputting a consistent number of columns with empty strings for values that aren't found....

gjhami

Null Password and NTLM Hash

1

On the HackTheBox machine Escape, the guest user was enabled on a DC. I attempted to authenticate using the password `''` but the tool refused to accept it as a...

Zamanry

Within the HackTheBox Sauna and Forest machines, the same error occurred despite the domain being valid:  Valid domain: - https://www.n00py.io/2020/02/exploiting-ldap-server-null-bind/  Once authenticated, the tool ran fine.

Zamanry