Bloodhound
Collect Active Directory Data
bash
nxc ldap $IP -d shadow.gate -u 'jtrueblood' -p 'blood_brothers' --bloodhound \
--collection All --dns-server $IP
# Output
# Move the file to our "Loot" place for import
mv /home/peter/.nxc/logs/*_$IP_* $IP/Loot/bloodhound Enumeration
Shares
Anonymous
bash
# Anonymous
nxc smb $IP -u '' -p '' --shares --log $IP/Enum/nxc/shares-user-anonymous.txt
# OutputGuest
bash
# Guest
nxc smb $IP -u 'Guest' -p '' --shares --log $IP/Enum/nxc/shares-user-guest.txt
# OutputUsers
Anonymous
bash
# Anonymous
nxc smb $IP -u '' -p '' --users --log $IP/Enum/nxc/users-user-anonymous.txt
# Outputx