Baric's knowledge Base

Baric
Security Programs
Development
IT Help
Security Education

Powered by GitBook

On this page

Security Programs

Windows

AD LDAPnomnom extract usernames

PreviousSMB - RSMBI Scanner NextAADinternals

Last updated 9 months ago

Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)

Looks for enabled normal user accounts. No Windows audit logs generated. High speed ~ up to 10K/sec - go beyond 25K/sec with multiple servers!

Download

GitHub - lkarlslund/ldapnomnom: Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)GitHub