ldeep

No entries match these filters. Clear filters

1. 2.0.3 May 23, 2026 · release notes

   ldeep 2.0.3 adds a command to remove Foreign Security Principals from Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments..

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.3 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 2.0.3

2. 2.0.0 Feb 19, 2026 · release notes

   ldeep 2.0.0 adds LAPSLAPSA Microsoft feature that automatically generates, rotates, and stores unique local administrator passwords for each Windows machine in Active Directory, eliminating shared static credentials across a fleet. support, richer AD formatters, cross-domain group membership, and improved membersof/memberships output.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0

   • Adds formatters for multiple AD attribute types, improving human-readable output across queries.
   • Adds a groupType formatter to decode AD group type flags into readable labels.
   • Adds a kerberos_enc_type formatter to display supported KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. encryption types for accounts.
   • Adds LAPS support in cache mode, enabling offline inspection of LAPS-protected attributes.
   • Enables optional name filtering for OU, GPO, and computer operations, allowing broader enumeration without specifying a target name.

   +5 more show less

   • Allows foreign (cross-domain) users to be added to groups via add_to_group.
   • Adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. functional level 2025 recognition in the PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets./AD info module.
   • Refactors membersof and memberships commands with improved recursion, output readability, and full cache mode support.
   • Improves formatting of principals and SIDs in command output.
   • Adds Python 3.14 support.

   10 details in Everything

3. 1.0.88 Sep 15, 2025 · release notes

   ldeep 1.0.88 adds LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. Signing & LDAPSLDAPSLDAP over TLS — the encrypted variant of the Lightweight Directory Access Protocol, standardized in RFC 2830, used to query directory services like Active Directory without exposing credentials in plaintext. Channel Binding verification and binary SID format support.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.88 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 1.0.88

   • New LDAP Signing and LDAPS Channel Binding verification capability to detect misconfigured AD signing/binding policies.
   • Supports binary SID format, enabling correct resolution of SIDs stored in binary encoding.

   2 details in Everything

4. 1.0.86 May 1, 2025 · release notes

   ldeep 1.0.86 adds formatting and filtering for DNS records in LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. enumeration.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.86 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 1.0.86

   • Adds format and filter options for DNS records returned during LDAP enumeration.

   1 detail in Everything

5. 1.0.85 Apr 24, 2025 · release notes

   ldeep 1.0.85 adds LAPSLAPSA Microsoft feature that automatically generates, rotates, and stores unique local administrator passwords for each Windows machine in Active Directory, eliminating shared static credentials across a fleet. readers enumeration to its Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. reconnaissance toolkit.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.85 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 1.0.85

   • Adds enumeration of LAPS readers — identifying principals with access to Local Administrator Password Solution attributes.

   1 detail in Everything

6. 1.0.84 Mar 2, 2025 · release notes

   ldeep 1.0.84 adds recursive group membership resolution to the membersof module.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.84 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 1.0.84

   └──▷ TRY IT
   Enumerate all effective members of a group including nested group memberships — useful for finding indirect access paths during an AD assessment.
   copy

   $ ldeep ldap membersof --recursive "Domain Admins"

7. 1.0.82 Mar 2, 2025 · release notes

   ldeep 1.0.82 adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. schema partition dumping.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.82 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 1.0.82

   • Adds schema partition dump capability to enumerate the AD schema partition.

   1 detail in Everything

8. 1.0.73 Nov 10, 2024 · release notes

   ldeep 1.0.73 adds sAMAccountName filtering to GMSA queries.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.73 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 1.0.73

   • Adds sAMAccountName filter to the GMSA query, enabling targeted lookup of specific managed service accounts.

   1 detail in Everything

9. 1.0.70 Oct 8, 2024 · release notes

   ldeep 1.0.70 adds ESC15 detection via msPKI-Template-Schema-Version and improves OU display.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.70 https://github.com/franc-pentest/ldeep.git
   # already have the repo? check out this version:
   $ git checkout 1.0.70

   • Adds msPKI-Template-Schema-Version attribute enumeration to support ESC15 certificate template abuse detection.
   • Updates Organizational Unit (OU) display output.

   2 details in Everything

10. 1.0.64 Sep 18, 2024 · release notes

    ldeep 1.0.64 adds ADCSADCSActive Directory Certificate Services, Microsoft's PKI role for issuing and managing X.509 certificates inside a Windows domain; cyber tools target it because misconfigurations frequently allow privilege escalation or domain compromise. certificate template enumeration for AD CS attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. discovery.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.64 https://github.com/franc-pentest/ldeep.git
    # already have the repo? check out this version:
    $ git checkout 1.0.64

11. 1.0.62 Sep 7, 2024 · release notes

    ldeep 1.0.62 adds --no-encryption option for unencrypted LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. connections

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.62 https://github.com/franc-pentest/ldeep.git
    # already have the repo? check out this version:
    $ git checkout 1.0.62

    └──▷ TRY IT
    Query an LDAP server that doesn't support TLS or STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports., such as a legacy DC in a lab environment
    copy

    $ ldeep ldap --no-encryption -u <user> -p <password> -d <domain> -s <server> all

    • Adds --no-encryption option to connect to LDAP without encryption

    1 detail in Everything

12. 1.0.59 Jul 11, 2024 · release notes

    ldeep 1.0.59 adds LDAPSLDAPSLDAP over TLS — the encrypted variant of the Lightweight Directory Access Protocol, standardized in RFC 2830, used to query directory services like Active Directory without exposing credentials in plaintext. channel binding, recursive primary group enumeration, and low-priv PSO enumeration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.59 https://github.com/franc-pentest/ldeep.git
    # already have the repo? check out this version:
    $ git checkout 1.0.59

    └──▷ TRY IT
    Connect to an LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. server with channel binding and signing enabled for stronger security.
    copy

    $ ldeep ldap connect --binding ldaps --channel-binding --signing <domain>

    Enumerate groups recursively, including the primary group membership.
    copy

    $ ldeep ldap groups <target> --recursive --primary-group

    • Adds LDAP signing and LDAPS channel binding support for authenticated connections
    • Enables recursive group enumeration for the primary group
    • Allows Password Settings Object (PSO) enumeration by a user with low privileges

    3 details in Everything

13. 1.0.58 Jun 11, 2024 · release notes

    ldeep 1.0.58 adds the --passwordnotrequired flag to its subparsers for targeted user filtering.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.58 https://github.com/franc-pentest/ldeep.git
    # already have the repo? check out this version:
    $ git checkout 1.0.58

    └──▷ USE IT
    List domain users who have the Password does not expire or similar setting allowing a non-required password change, useful for identifying weaker auth states.
    shell copy

    ldeep ldap -h <host> -u <user> -p <pass> users --passwordnotrequired

    • ldeep now accepts a --passwordnotrequired flag on relevant subcommands (e.g., users) to filter accounts where password change is not required.

    1 detail in Everything