Find Usernames
checklist
Walkthrough
Build a domain user list from a foothold shell or via anonymous LDAP. The resulting names feed password spraying, AS-REP roasting, and RID enumeration.
Commands
cmd
net user /domain
bash
netexec ldap <IP> -u '' -p '' --users