nmap - ldap

Attackers use the ldap-brute NSE script to brute-force LDAP authentication. By default, it uses the built-in username and password lists. The userdb and passdb script arguments can be employed to use custom lists.

nmap -p 389 --script ldap-brute --script-args=ldap-brute.hostname=10.10.1.22 10.10.1.22 

nmap -p 389 --script ldap-brute --script-args ldap.base='"cn=users,dc=CEH,dc=com"' <Target IP Address>

nmap -p 389 --script ldap-brute,ldap-search --script-args=ldap-brute.hostname=10.10.1.22 10.10.1.22