discovery

ldapsearch #


ldapsearch -x -h target-ip -b "dc=domain,dc=tld"

windapsearch.py #


./windapsearch.py -d host.domain.tld -u domain\\ldapbind -p password -U