> For the complete documentation index, see [llms.txt](https://tenaka.gitbook.io/pentesting/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://tenaka.gitbook.io/pentesting/enumeration/ldap-ad-dc/ldapsearch.md).

# ldapsearch

### LdapSearch

ldapsearch -L -x -H ldap\://10.0.10.1 -s base namingcontexts

ldapsearch -L -x -H ldap\://10.0.0.1 -b "dc=trg,dc=loc"

ldapsearch -L -x -H ldap\://10.0.0.1 -b "dc=trg,dc=loc" '(objectclass=\*)' 'givenName=username\*'

ldapsearch -L -x -H ldap\://10.0.0.1 -b "dc=trg,dc=loc" '(objectclass=computer)' samaccountname

ldapsearch -L -x -H ldap\://10.0.0.1 -b "dc=trg,dc=loc" '(objectclass=user)' samaccountname

ldapsearch -L -x -H ldap\://10.0.0.1 -b "dc=trg,dc=loc" '(objectclass=group)' samaccountname

ldapsearch -L -x -H ldap\://10.0.0.1 -b "dc=trg,dc=loc" '(objectclass=user)' userPrincipalName

ldapsearch -L -x -H ldap\://10.0.0.1 -b "dc=trg,dc=loc" '(objectclass=user)' 'samaccountname' 'name' 'description' 'scriptpath' 'userPrincipalName' 'displayname' 'givenname'

ldapsearch -L 10.0.10.1 -x -s base namingcontext

ldapseach -L 10.0.0.1 -x -b "DC=domain,DC=Root"

ldapseach -L 10.0.0.1 -x -b "DC=domain,DC=Root" '(objectClass=User)' samAccountName