RID Brute After SMB
checklist
Walkthrough
Enumerate domain accounts by brute-forcing RIDs over SMB once you have any valid login. A hit is a full list of users and groups to seed spraying and roasting.
Commands
bash
netexec smb <IP> -u <USER> -p '<PASS>' --rid-brute