Credentialed LDAP Enumeration

What is the userAccountControl bitmask for NORMAL_ACCOUNT and ENCRYPTED_TEXT_PWD_ALLOWED? (decimal value) ?

Not sure what Im doing wrong here. getting No result, This is the query Im using

python3 windapsearch.py --dc-ip 10.129.42.188 -u inlanefreight\james.cross -p “Academy_Student!” -s “(&(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=512)(userAccountControl:1.2.840.113556.1.4.803:=128))”

For anyone else who is having issues with this if you want to run custom LDAP queries with windapsearch.py like in the OP you need to use the --custom flag, not -s. Also, the OP’s custom query will return the user that has those attributes set, but to get the decimal value bitmask for the two properties just add the final number in each half of the query.

Can you help me with this issue? I cannot use windapsearch.py on my pawnbox and I can not get the bitmask through ldapsearch-ad.py.

Thank you ahead of time