Authentication

LDAP Authentication

Testing if an account exists without kerberos protocol

nxc ldap <CIDR> -u <USERFILE> -p '' -k

Testing credentials

nxc ldap <CIDR> -u <USERNAME> -p <PASSWORD>
nxc ldap <CIDR> -u <USERNAME> -H <HASH>

Expected Results:

LDAP        192.168.255.131 5985   ROGER            [+] GOLD\user:password

Warning

Domain name resolution is expected

By default, the ldap protocol will get the domain name by making connection to the SMB share (of the dc), if you don't want that initial connection, just add the option --no-smb