.. / AD - nmap - Check for DC's on a range

• Scanning
• No Creds
• LDAP
• Linux

Use nmap to check if DC’s are present on a range with LDAP.

Command Reference:

Network: 192.168.4.0/24

-n: never do DNS resolution

• nmap -vv 192.168.4.0/24 -n -p389,636 | awk -F'[ /]' '/Discovered open port/{print $NF":"$4}'