Active Directory Members Only

LDAP Enumeration & Attacks in Active Directory

LDAP is the query interface to Active Directory. Every AD tool speaks LDAP under the hood. Understanding raw LDAP lets you enumerate AD from any platform with ldapsearch, craft targeted queries for Kerberoastable accounts and misconfigs, and identify LDAP injection in web apps authenticating against AD.

Related Articles