@dmcxblue said:
Any one can recommend a tool for enumerating ldap or its hashes? Stuck on entry and have no idea if I am following a rabbit hole…
i am also stuck here. Any one please PM me .
After reviewing the box and playing it, had lot’s of fun with it, as usual good job for not making a mind-blown machine like the most of the users out there, keep it simple creative and unique in the ways. Now on the user part guys focus on the PORTS, when there is no apache there is another entry. Spoiler Removed - Arrexel
I am trying to get the ldap page. It was restricted so I changed firefox settings. Now when I try to connect to ldap port, it is saying your connection was reset. I am new on this stuff so can anyone pm me for hints please ???
@tolg4yan said:
I am trying to get the ldap page. It was restricted so I changed firefox settings. Now when I try to connect to ldap port, it is saying your connection was reset. I am new on this stuff so can anyone pm me for hints please ???
Hi tolg4yan,
did you try to duckduckgo “ldap enumeration”?
@nodurhead said:
I think I have a username and password but I can’t ssh in. I keep getting permission denied public key. If someone can pm me I can give more details.
Perfect hint for privesc @Frey , I really appreciate links like this as it’s not enough of a hint to be a spoiler but it’s enough that if you’ve done your homework and are stuck (me), you can learn something new without spending hours in a deep, dark rabbit hole. Thanks!
Hi, I found usernames and a hash, I was able to log in to a service, but cant do anything, I get an error.
Is there some other way of enumerating dirs?
@pkneca said:
Hi, I found usernames and a hash, I was able to log in to a service, but cant do anything, I get an error.
Is there some other way of enumerating dirs?
@tolg4yan said:
I am trying to get the ldap page. It was restricted so I changed firefox settings. Now when I try to connect to ldap port, it is saying your connection was reset. I am new on this stuff so can anyone pm me for hints please ???
Hi tolg4yan,
did you try to duckduckgo “ldap enumeration”?
I ve used jx***** for ldap enumeration and find some interesting stuff. But I couldn’t figure how am I gonna use them. When I try to use it with ssh it is saying premission denied (publickey).
@tolg4yan said:
I am trying to get the ldap page. It was restricted so I changed firefox settings. Now when I try to connect to ldap port, it is saying your connection was reset. I am new on this stuff so can anyone pm me for hints please ???
Hi tolg4yan,
did you try to duckduckgo “ldap enumeration”?
I ve used jx***** for ldap enumeration and find some interesting stuff. But I couldn’t figure how am I gonna use them. When I try to use it with ssh it is saying premission denied (publickey).
I am proceeding but I think I need some hints.
The only thing you need to enumerate ldap is nmap dude.
I ve used the following script -l-e**.py to enumerate ldap. However, i get the following error “ldap.NO_SUCH_OBJECT: {‘desc’: u’No such object’}”. Any help will be appreciated
@icyDux said:
I ve used the following script -l-e**.py to enumerate ldap. However, i get the following error “ldap.NO_SUCH_OBJECT: {‘desc’: u’No such object’}”. Any help will be appreciated
I answered this question four posts above mate ^^^