Re: [PEN-TEST] Tool for LDAP Enumeration

[H Carvey <keydet89 () YAHOO COM>]

> I use ldapsearch (comes with openldap) under 
Linux. I then search for
> CN=* which in some implementations dump the full 
db. 

I've done something similar.  At 
http://www.forixnt.com/tools.html, there is a Perl 
script called ldapdump.pl.  I've used it 
successfully to dump from some Exchange servers 
but haven't gotten it to work on some of the win2k 
machines...

Carv