{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Collects and exports Active Directory information via LDAP in human-readable HTML, JSON, CSV, and greppable formats for domain reconnaissance.","skillfed_tags":["active-directory","ldap-enumeration","pentest-recon"],"use_cases":["Enumerate all users, groups, and computers in an AD domain during an internal pentest reconnaissance phase.","Extract domain policy information (password requirements, lockout policies) for security assessment.","Generate structured reports of domain trusts and their properties for trust relationship analysis.","Feed domain data into BloodHound (via ldd2bloodhound utility) or other AD visualization tools.","Integrate with NTLM relay attacks by accepting an existing authenticated LDAP connection from impacket.","Minimize memory usage on large networks by using the --minimal flag to dump only essential attributes."],"what_it_does":"ldapdomaindump is a command-line tool that queries an Active Directory domain via LDAP and extracts structured information about users, groups, computers, policies, and domain trusts. It's designed for the reconnaissance phase of internal penetration tests, where an authenticated user or machine account can retrieve data that would otherwise be scattered across LDAP in an unreadable format.\n\nThe tool outputs multiple files in parallel: HTML for human review, JSON and CSV/TSV for machine parsing, and greppable tab-delimited text. It supports both NTLM and SIMPLE authentication, can work with NTLM hashes, and integrates with relaying tools like impacket's ntlmrelayx. It includes utility scripts to convert output to BloodHound-compatible CSV or enum4linux-style pretty-printed format. Runtime dependencies are dnspython and ldap3.","worth_installing":"Yes, if you are performing internal penetration testing or AD security assessments and need to extract and format LDAP data for analysis. The low install friction and permissive license make it straightforward to add to a pentest toolkit. Caveat: maintenance is aging (last release 497 days ago), so verify compatibility with your target AD environment and LDAP server version before relying on it in production assessments."},"id":"ldapdomaindump","links":{"html":"https://skillfed.io/packages/ldapdomaindump","md":"https://skillfed.io/packages/ldapdomaindump.md","pypi":"https://pypi.org/project/ldapdomaindump/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2025-04-04","license_spdx":"MIT","license_treatment":"permissive","name":"ldapdomaindump","python_support":"supports_current","summary":"Active Directory information dumper via LDAP"},"popularity":{"monthly_downloads":661510,"position":5450,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.10.0"}
