ldapdomaindump

ldapdomaindump is a Python 3 tool designed to extract valuable Active Directory information via LDAP queries. In Active Directory domains, authenticated users (or machines) can retrieve significant amounts of data through LDAP, making it essential for reconnaissance during internal network pentests. The tool addresses the challenge of LDAP data's complex format by parsing and presenting it in accessible HTML reports, machine-readable JSON/CSV/TSV files, and greppable output.

The package provides three main utilities: the primary ldapdomaindump for data extraction, ldd2bloodhound for converting JSON output to BloodHound-compatible CSV format, and ldd2pretty for generating enum4linux-style pretty output. This makes it valuable for both human analysis and integration with other pentesting tools like BloodHound.

Use cases include domain enumeration during internal pentests, mapping Active Directory structures, identifying users/computers/groups, and extracting OS/membership information for further attack planning.

The tool connects to an Active Directory domain controller via LDAP (or LDAPS for SSL) using provided credentials or anonymous authentication. It queries LDAP for domain objects including users, computers, groups, trusts, and policy information, then parses the raw LDAP responses. Output is generated in multiple formats: HTML for human-readable visualization, JSON/CSV/TSV for machine processing, and greppable text files. Optional resolution of computer hostnames via DNS and minimal attribute queries help manage performance on large networks.