Active_Kerberos

Kerberos

---

Nmap discovered a Kerberos service running on the target port 88 and 464

User Enumeration

---

┌──(kali㉿kali)-[~/archive/htb/labs/active]
└─$ kerbrute userenum --dc dc.active.htb -d ACTIVE.HTB /usr/share/wordlists/seclists/Usernames/xato-net-10-million-usernames.txt 
 
    __             __               __     
   / /_____  _____/ /_  _______  __/ /____ 
  / //_/ _ \/ ___/ __ \/ ___/ / / / __/ _ \
 / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/
/_/|_|\___/_/  /_.___/_/   \__,_/\__/\___/                                        
 
Version: v1.0.3 (9dad6e1) - 01/31/23 - Ronnie Flathers @ropnop
 
2023/01/31 10:04:44 >  Using KDC(s):
2023/01/31 10:04:44 >  	dc.active.htb:88
 
2023/01/31 10:06:14 >  [+] VALID USERNAME:	 Administrator@ACTIVE.HTB

I let this roll for about an hour and Kerbrute was unable to enumerate domain username. Except for the default, administrator