Dump LDAP Fortigate

[MrXry]

 

[Sec13B]

you need to know or you already know and want share your method

 

[MrXry]

I have already discovered a way, that's why I deleted the content because I don't know how to delete the entire post, but I'm still looking for a way to intercept hashes from fortigate without having ldap credentials connected, i can see ldap packets that arrive from clients to the dc but I don't know how to see the content, there has to be some way

 

[phant0m]

I have already discovered a way, that's why I deleted the content because I don't know how to delete the entire post, but I'm still looking for a way to intercept hashes from fortigate without having ldap credentials connected, i can see ldap packets that arrive from clients to the dc but I don't know how to see the content, there has to be some way

What kind of packets are you seeing ? Those are probably kerberos TGT or TGS packets, you cant just "Capture" them lol

 

[Sec13B]

I have already discovered a way, that's why I deleted the content because I don't know how to delete the entire post, but I'm still looking for a way to intercept hashes from fortigate without having ldap credentials connected, i can see ldap packets that arrive from clients to the dc but I don't know how to see the content, there has to be some way

show again , what you discover , i miss your last post