Scan for vulnerabilities

Check if the DC is vulnerable

When you start your internal pentest, this is the first modules you should try:
Zerologon
crackmapexec smb <ip> -u '' -p '' -M zerologo
PetitPotam
crackmapexec smb <ip> -u '' -p '' -M petitpotam
noPAC
crackmapexec smb <ip> -u 'user' -p 'pass' -M nopac
You need a credential for this one
​
​

Getting Started - Previous

Log your results

Next - SMB protocol

Enumeration

Last modified 7mo ago