Enumerate Domain Users
To enumerate all users via LDAP:
nxc ldap $ip -u $user -p $password --users
To export all users to a file:
nxc ldap $ip -u $user -p $password --users-export output.txt
To enumerate just the active users via LDAP:
nxc ldap $ip -u $user -p $password --active-users
See the blog post by @TeRMaN (Mehmetcan Topal) on what exactly the differences are and why it was implemented: https://medium.com/@mehmetcantopal/why-and-how-did-i-implement-an-active-users-ldap-feature-on-netexec-f5c7eff2cb79
Last updated
Was this helpful?