Active Directory Penetration Testing & THM VulnNet: Roasted

Pentesting Windows Active Directory

MITRE ATT&CK Mapping

MITRE ATT&CK Mapping

Enumeration

nmap 10.10.43.224 -vv -Pn

nmap scan

nmap -sV 10.10.43.224 -vv -Pn

nmap scan

SMB share enumeration

smbclient -L \\\\10.10.84.141\\

Let's grab all the text files.

smb share enumeration

smbclient -\\\\10.10.84.141\\VulnNet-Business-Anonymous

ls

mget *

smb share enumeration

smbclient -\\\\10.10.84.141\\VulnNet-Enterprise-Anonymous

ls