https://github.com/p0dalirius/ldapconsole

The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.
https://github.com/p0dalirius/ldapconsole

active-directory bugbounty ldap pentesting search

Last synced: 12 days ago
JSON representation

The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.

• Host: GitHub
• URL: https://github.com/p0dalirius/ldapconsole
• Owner: p0dalirius
• Created: 2021-12-09T16:42:48.000Z (about 3 years ago)
• Default Branch: master
• Last Pushed: 2024-07-25T11:02:29.000Z (6 months ago)
• Last Synced: 2025-01-16T18:22:38.463Z (19 days ago)
• Topics: active-directory, bugbounty, ldap, pentesting, search
• Language: Python
• Homepage: https://podalirius.net/
• Size: 181 KB
• Stars: 63
• Watchers: 2
• Forks: 11
• Open Issues: 6
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml

Awesome Lists containing this project

README

        
![](./.github/banner.png)



  The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.

  


  

  

  

  




## Features

 - [x] Authentications:

   - [x] Authenticate with password

   - [x] Authenticate with LM:NT hashes (Pass the Hash)

   - [x] Authenticate with kerberos ticket (Pass the Ticket)

 - [x] Interactive mode

   - [x] Colored results

   - [x] Preset queries 

 - [x] Non-interactive mode

   - [x] Colored results

   - [x] Exportable to XLSX format with option `--xlsx`

  

## Requirements

For `python-ldap`:

```bash

sudo apt-get install libsasl2-dev python3-dev libldap2-dev libssl-dev

```

And then:

```bash

python3 -m pip install -r requirements.txt

```

## Examples

```bash

./ldapconsole.py -u 'user1' -p 'Admin123!' -d 'LAB.local' --dc-ip 192.168.2.1

```

![](./.github/example.png)

### Extract the list of the computers with an obsolete OS to an Excel file

```bash

./ldapconsole.py -d LAB.local -u Administrator -p 'Admin123!' --dc-ip 10.0.0.101 -q '(&(objectCategory=Computer)(|(operatingSystem=Windows 2000*)(operatingSystem=Windows Vista*)(operatingSystem=Windows XP*)(operatingSystem=Windows 7*)(operatingSystem=Windows 8*)(operatingSystem=Windows Server 200*)(operatingSystem=Windows Server 2012*)))' -a 'operatingSystem' -a 'operatingSystemVersion' -x ComputersWithObsoleteOSes.xlsx

```

## Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.