C# LDAP query tool intended for use as a Cobalt Strike execute-assembly payload. Its documented features include listing domain users, groups, computers, SPNs and Domain Admin accounts, plus custom LDAP searches with selected attributes. It supports remote LDAPS on port 636 by default; --insecure selects unencrypted LDAP on port 389. Omitting --domain performs local lookups.
C#
RESTRICTED_ACCESS_BLUR_MARKER