Skip to content

LDAP:

Enumeration

Enumerate LDAP via anonymous and auth binds, users, groups, misconfigs

5 guides • Created Dec 28, 2025 • Updated Mar 29, 2026
5 guides

LDAP Authenticated User Group Enumeration

Enumerate Active Directory user groups via authenticated LDAP queries using tools like ldapsearch, BloodHound, and PowerView to map privilege relationships.

Jan 4, 2026 • 6 min read

LDAP enumeration pulls directory information that maps out the target environment. This covers base DN discovery, listing users and groups, querying ACLs for access control details, inspecting the directory schema, and identifying trust relationships between domains.

The subpages show how to extract this data using both anonymous and authenticated LDAP queries, with techniques applicable to Active Directory and other LDAP implementations.