Skip to content

Conversation

@vikerup
Copy link

@vikerup vikerup commented Oct 4, 2025

Client implementation of Mathieu Gascon-Lefebvre (@mlefebvre) fantastic ldap_shell.py class.

Supports: plain-text password, kerberos, NTLM hashes, ldap and ldaps.

@vikerup
Copy link
Author

vikerup commented Oct 4, 2025

user@adpen1:~$ KRB5CCNAME=/domainjoin.ccache ldap_shell.py test.local/[email protected] -dc-ip 100.64.5.200 -no-pass -k -ldaps
Impacket v0.13.0.dev0+20251002.113829.eaf2e556 - Copyright Fortra, LLC and its affiliated companies

Type help for list of commands

# whoami
u:TEST\domainjoin

@emilyastranova
Copy link

This is great! I used to use ntlmrelayx.py with -i and ldap:// pointed to my target LDAP server and auth to myself to get an this functionality 😆

YOLOP0wn added a commit to YOLOP0wn/impacket that referenced this pull request Nov 1, 2025
@anadrianmanrique anadrianmanrique added the in review This issue or pull request is being analyzed label Nov 7, 2025
@RobinvandenHurk
Copy link

I made this exactly. About to make a PR when I found this one. That'll teach me to check if someone else already made what I want... maybe.

Anyway, I propose to rename the script to ldapclient.py to align with the already existing scripts. Look mom, I contributed!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in review This issue or pull request is being analyzed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants