> For the complete documentation index, see [llms.txt](https://www.netexec.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.netexec.wiki/ldap-protocol/dc-list.md).

# List DC IP / Enum Trust

List DC

ldap --dc-list flag listing Domain Controllers and finds IP Addresses (If accessible). Also enumerates domain trust and their Domain Controller.

```bash
nxc ldap <ip> -u user -p pass --dc-list
```

<figure><img src="https://361548579-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fb0qbsNvsXjRTsQcNipGM%2Fuploads%2Fgit-blob-ae84755cc7037e173fb23186364294fc96905fc8%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>