VulnScanners Logo

Active Directory

LDAPDomainDump

Dump Active Directory contents via LDAP.

adldap
ldapdomaindump — terminal
$ ldapdomaindump -u 'DOMAIN\\user' -p pass 10.0.0.1

What it does

LDAPDomainDump collects AD users, groups, computers, and policies over LDAP and lays them out as readable HTML and JSON. It gives fast situational awareness inside a domain.

Common use cases

  • •Obtain a complete listing of AD users, groups, and computers during domain recon.
  • •Identify privileged groups — Domain Admins, Enterprise Admins — and their membership quickly.
  • •Export domain policy details including password policy and account lockout settings.

Key features

  • •Dumps all domain objects via LDAP and renders them as browsable HTML pages.
  • •Exports structured JSON data for automated processing and integration with BloodHound.
  • •Captures group membership, delegation, and privilege relationships across the domain.

Source

https://github.com/dirkjanm/ldapdomaindump ↗

More Active Directory tools

CrackMapExecSwiss-army knife for AD network post-exploitation.ImpacketPython toolkit of network-protocol scripts.GetNPUsers.pyAS-REP roasting via Impacket.enum4linux-ngSMB and Windows enumeration.

Need hosted scanning instead of local tooling?

Run a scan in the browser →