finding

Enumeration

nmap -p- -sC -sV --open --min-rate=1000 "$ip"

Search for stored information

ldapsearch -H ldap://<IP>:389 -D "cn=admin,dc=example,dc=com" -w secret123 -b "ou=people,dc=example,dc=com" "(mail=[e-mail])"

LDAP injection

* Match with any number
() Group expression
| OR
& AND
(cn=*) It evaluates to true