Name

ldeep

Version

1.0.58 - https://github.com/franc-pentest/ldeep/releases

Homepage

https://github.com/franc-pentest/ldeep/

Download

ldeep Releases - https://github.com/franc-pentest/ldeep/releases

Author

franc-pentest

Licence

MIT License

Description

ldeep is an in-depth LDAP enumeration utility designed to help with the exploration and analysis of LDAP directories. It provides detailed information about LDAP structures and helps in the discovery of important data within these directories. It can run against an Active Directory LDAP server or locally on saved files.

Dependencies

Python 3.x
Python libraries: argparse, ldap3
Native extensions for Kerberos: libkrb5-dev, krb5-config, gcc, python-devel

Similar tools

ldapsearch (part of OpenLDAP suite)
ldapenum (part of the enum4linux-ng tool)

Activity

The project was started 6 years ago. The latest commit on the repository was 3 days ago (Jun 14, 2024), indicating that the project is actively maintained.

How to install

To install ldeep:

Install native dependencies for Kerberos:
sudo apt-get install -y libkrb5-dev krb5-config gcc python-devel

Download the latest release from the ldeep Releases page.
Extract the downloaded archive.
Navigate to the extracted directory.
Install the required Python dependencies using pip:
python -m pip install -r requirements.txt
Install ldeep:
python -m pip install .

How to use

Some basic commands/functions to demonstrate its usage:

Help is self-explanatory. Let's check it out:

$ ldeep -h
usage: ldeep [-h] [--version] [-o OUTFILE] [--security_desc] {ldap,cache} ...

options:
-h, --help show this help message and exit
--version show program's version number and exit
-o OUTFILE, --outfile OUTFILE
Store the results in a file
--security_desc Enable the retrieval of security descriptors in ldeep results

Mode:
Available modes

{ldap,cache} Backend engine to retrieve data

Enumerate Users:

ldeep ldap -u Administrator -p 'password' -d winlab.local -s ldap://10.0.0.1 users

Enumerate Users with Reversible Password Encryption and Verbosity:

ldeep ldap -u Administrator -p 'password' -d winlab.local -s ldap://10.0.0.1 users reversible -v

List Group Policy Objects (GPOs):

ldeep ldap -u Administrator -p 'password' -d winlab.local -s ldap://10.0.0.1 gpo

Perform Comprehensive Enumeration and Save Results:

ldeep ldap -u Administrator -p 'password' -d winlab.local -s ldap://10.0.0.1 all /tmp/winlab.local_dump

Packaged

No, the tool is not already packaged for Debian.