LDAP Enumeration & Attacks in Active Directory
LDAP is the query interface to Active Directory. Every AD tool speaks LDAP under the hood. Understanding raw LDAP lets you enumerate AD from any platform with ldapsearch, craft targeted queries for Kerberoastable accounts and misconfigs, and identify LDAP injection in web apps authenticating against AD.
Members Only Content
This article is exclusively available to registered members of LazyHackers. Login or subscribe to read.