LdapRelayScan

Test directory-service authentication protections. A policy finding is evidence about that endpoint, not proof that an attack chain will succeed.

Setup and checks

Use the upstream repository and its dependency set; do not assume a PyPI package or executable named ldaprelayscan.

git clone https://github.com/zyn3rgy/LdapRelayScan.git
cd LdapRelayScan
python3.11 -m venv .venv
. .venv/bin/activate
python3 -m pip install -r requirements_exact.txt
python3 LdapRelayScan.py -h

# DNS/discovery seed; tests the domain controllers discovered through it
python3 LdapRelayScan.py -method LDAPS -dc-ip 192.0.2.10