ldapsearch-ad is a Python3 script designed for rapid information gathering from a domain controller via its LDAP service. It’s often used immediately after acquiring valid Active Directory credentials, serving as a valuable complement to tools like BloodHound and PingCastle. The script offers flexible installation methods, either through pipx or by cloning its source code and installing dependencies. It supports a range of information retrieval capabilities, from basic data collection when no credentials are provided to more extensive searches, including the ability to authenticate using NTLM hashes. This makes it a versatile tool for security professionals and system administrators seeking to enumerate Active Directory environments.
Git Hub Source :: https://github.com/yaap7/ldapsearch-ad