Authenticate With Every Possible Cred

ad enumchecklist

Summary

Also try -k (Kerberos), --local-auth, and --generate-krb5-file.

Walkthrough

Spray every collected username/password combination against SMB to find valid credentials. A [+] result confirms a working login, and (Pwn3d!) indicates local admin access.

Commands

bash

netexec smb <IP> -u users.txt -p passwords.txt --continue-on-success