Active Directory Methodology
Extract domain info using IPC$ Share
IPC$ Share is essential for communication between programs and remotely accessing or managing another computer.
enum4linux IP
Find objects updated since a specific date
Show domain users
Show specific info of domain user
Show domain groups
Show members of a group
Show Password Policy
Show info about the Domain
Perform password-spray attack without locking accounts
We need to search accounts with the badPwdCount attribute greater than 0, those accounts will be avoided in our password-spray attack.
This will only show results if one of the users in the network mistyped their password a couple of times.
Last updated