> For the complete documentation index, see [llms.txt](https://www.netexec.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.netexec.wiki/ldap-protocol/dc-list.md).

# List DC IP / Enum Trust

ldap --dc-list flag listing Domain Controllers and finds IP Addresses (If accessible). Also enumerates domain trust and their Domain Controller.

```bash
nxc ldap <ip> -u user -p pass --dc-list
```

<figure><img src="/files/cXaspn5NwHUdVgSKraHL" alt=""><figcaption></figcaption></figure>