Username Enumeration


┌──(kali㉿kali)-[~/archive/htb/labs/resolute]
└─$ KRB5CCNAME=melanie.ccache impacket-GetADUsers MEGABANK.LOCAL/ -k -no-pass -dc-ip $IP -all
Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation
 
[*] Querying RESOLUTE for information about domain.
Name                  Email                           PasswordLastSet      LastLogon           
--------------------  ------------------------------  -------------------  -------------------
administrator                                         2023-06-10 18:46:03.213840  2023-06-10 15:44:03.945273 
Guest                                                 <never>              <never>             
DefaultAccount                                        <never>              <never>             
krbtgt                                                2019-09-25 15:29:12.154667  <never>             
ryan                                                  2023-06-10 18:46:02.515584  <never>             
marko                                                 2019-09-27 15:17:14.569061  <never>             
sunita                                                2019-12-03 22:26:29.108327  <never>             
abigail                                               2019-12-03 22:27:30.936946  <never>             
marcus                                                2019-12-03 22:27:59.256272  <never>             
sally                                                 2019-12-03 22:28:29.622615  <never>             
fred                                                  2019-12-03 22:29:01.882442  <never>             
angela                                                2019-12-03 22:29:43.451148  <never>             
felicia                                               2019-12-03 22:30:53.545222  <never>             
gustavo                                               2019-12-03 22:31:42.082567  <never>             
ulf                                                   2019-12-03 22:32:19.957565  <never>             
stevie                                                2019-12-03 22:33:13.438134  <never>             
claire                                                2019-12-03 22:33:44.808450  <never>             
paulo                                                 2019-12-03 22:34:46.745427  <never>             
steve                                                 2019-12-03 22:35:25.125917  <never>             
annette                                               2019-12-03 22:36:55.592358  <never>             
annika                                                2019-12-03 22:37:23.666378  <never>             
per                                                   2019-12-03 22:38:12.278673  <never>             
claude                                                2019-12-03 22:39:56.407621  <never>             
melanie                                               2023-06-10 18:46:03.182556  2023-06-10 18:41:18.559753 
zach                                                  2019-12-04 11:39:27.835093  <never>             
simon                                                 2019-12-04 11:39:58.563443  <never>             
naoki                                                 2019-12-04 11:40:44.342485  <never>             

Extracting the entire domain user with TGT