Pentesting_Active_directoryScan Network cme smb <ip_range> # enumerate smb hostsnmap -sP -p <ip> # ping scannmap -PN -sV --top-ports 50 --open <ip> # quick scannmap -PN --script smb-vuln* -p139,445 <ip> # search smb vulnnmap -PN -sC -sV <ip> # classic scannmap -PN -sC -sV -p- <ip> # full scannmap -sU -sC -sV <ip> # udp scanfind vulnerable host find AD IP nmcli dev show eth0 #Â show domain name & dnsnslookup -type=SRV _ldap._
{{#tags}}- {{label}}
{{/tags}}