Skip to content

Latest commit

 

History

History
8 lines (7 loc) · 295 Bytes

Reconnaissance - External.md

File metadata and controls

8 lines (7 loc) · 295 Bytes

Brute Forcing User RIDs

for i in $(seq 500 1100);do rpcclient -N -U "" 10.129.14.128 -c "queryuser 0x$(printf '%x\n' $i)" | grep "User Name\|user_rid\|group_rid" && echo "";done

Tools for enum SMB

  • Impacket - Samrdump.py
  • smbmap
  • crackmapexec
  • enum4linux-ng.py