StatusISOLATED LAB
Phase03_INITIAL_ACCESS
EgressBLOCKED?
Resume Session
RED TEAM OPS // PHASE 02

External Enumeration

Probe SMB, LDAP, Kerberos, and DNS to enumerate users, groups, shares, and policies.

Objectives

  1. 01Enumerate domain users without valid creds where possible.
  2. 02List SMB shares on FS01 and check for null/guest access.
  3. 03Pull password policy from DC01 via LDAP anonymous bind if permitted.

ATT&CK techniques

T1087T1069T1201T1018

Operator Checklist

operator@linux01 ~ /ops/enum
$ smbclient -N -L //10.10.10.3
Sharename Type Comment
--------- ---- -------
Finance Disk
HR Disk
IPC$ IPC Remote IPC
$

Command Reference

← PHASE 01 ReconnaissancePHASE 03 Initial Access →