nxc

Category Active Directory

Bloodhound

Collect Active Directory Data

bash
nxc ldap $IP -d shadow.gate -u 'jtrueblood' -p 'blood_brothers' --bloodhound \
  --collection All --dns-server $IP
  
 # Output
 
 # Move the file to our "Loot" place for import
 mv /home/peter/.nxc/logs/*_$IP_* $IP/Loot/bloodhound 

Enumeration

Shares

Anonymous

bash
# Anonymous
nxc smb $IP -u '' -p '' --shares --log $IP/Enum/nxc/shares-user-anonymous.txt

# Output

Guest

bash
# Guest
nxc smb $IP -u 'Guest' -p '' --shares --log $IP/Enum/nxc/shares-user-guest.txt

# Output

Users

Anonymous

bash
# Anonymous
nxc smb $IP -u '' -p '' --users --log $IP/Enum/nxc/users-user-anonymous.txt

# Output

x

The Latest 2 Write-ups using this tool