https://josupalacios99.github.io/blog/en/tags/ldap/Recent content in ldap on root@j0suHugoen-US2026 root@j0su · think like the adversaryThu, 18 Jun 2026 10:00:00 +0200https://josupalacios99.github.io/blog/en/posts/adws-enumeracion-sigilosa-active-directory/Thu, 18 Jun 2026 10:00:00 +0200https://josupalacios99.github.io/blog/en/posts/adws-enumeracion-sigilosa-active-directory/Almost all Active Directory enumeration goes through LDAP (389/636), which is precisely the most watched channel in the domain. ADWS is a side door on port 9389 that accepts the same LDAP queries but is barely monitored. How it works under the hood, why its OPSEC is so good, and why it isn’t invisible.