ldapdomaindump

What it is and what it does

ldapdomaindump is a command-line tool that queries an Active Directory domain via LDAP and extracts structured information about users, groups, computers, policies, and domain trusts. It's designed for the reconnaissance phase of internal penetration tests, where an authenticated user or machine account can retrieve data that would otherwise be scattered across LDAP in an unreadable format.

The tool outputs multiple files in parallel: HTML for human review, JSON and CSV/TSV for machine parsing, and greppable tab-delimited text. It supports both NTLM and SIMPLE authentication, can work with NTLM hashes, and integrates with relaying tools like impacket's ntlmrelayx. It includes utility scripts to convert output to BloodHound-compatible CSV or enum4linux-style pretty-printed format. Runtime dependencies are dnspython and ldap3.

Use it for:

• Enumerate all users, groups, and computers in an AD domain during an internal pentest reconnaissance phase.
• Extract domain policy information (password requirements, lockout policies) for security assessment.
• Generate structured reports of domain trusts and their properties for trust relationship analysis.
• Feed domain data into BloodHound (via ldd2bloodhound utility) or other AD visualization tools.
• Integrate with NTLM relay attacks by accepting an existing authenticated LDAP connection from impacket.
• Minimize memory usage on large networks by using the --minimal flag to dump only essential attributes.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Collects and exports Active Directory information via LDAP in human-readable HTML, JSON, CSV, and greppable formats for domain reconnaissance.

Yes, if you are performing internal penetration testing or AD security assessments and need to extract and format LDAP data for analysis. The low install friction and permissive license make it straightforward to add to a pentest toolkit. Caveat: maintenance is aging (last release 497 days ago), so verify compatibility with your target AD environment and LDAP server version before relying on it in production assessments.

Install

ldapdomaindump on PyPI

pip install ldapdomaindump

uv add ldapdomaindump

poetry add ldapdomaindump

Installing ldapdomaindump

Before you install

Low friction install with just two runtime dependencies (dnspython and ldap3). Maintenance is aging—last release was 497 days ago—but the repository remains active with recent commits and no archived status.

License in practice

MIT license is permissive; you can use, modify, and distribute this package freely with minimal restrictions.

Quickstart

pip install ldapdomaindump
ldapdomaindump -u DOMAIN\\username -p password -o ./output hostname_or_ip

Requires Python 3.6 or greater. Target LDAP server must be accessible and you must have valid credentials (or anonymous access) to query it.

Verify before relying

• Whether the tool works with modern Active Directory deployments and current LDAP server versions.
• Performance characteristics and memory usage on very large domains (beyond the --minimal flag guidance).
• Compatibility with recent versions of BloodHound or other downstream tools that consume its output.

Package facts

Evidence: ldapdomaindump-0.10.0-py3-none-any.whl

Tags

More Security packages