Domain Enumeration
Enum4linux - Querying a Domain Controller
enum4linux -a
#When -a isn't working
enum4linux -UPMSGEnum4linux - Querying with an account
enum4linux -u "USER" -p "password" -w somedomamin.local -a DC-01.somedomain.localLast updated
Was this helpful?