Making a Target List
Enum4Linux
enum4linux -U 13.13.13.13 | grep "user:" | cut -f2 -d"[" | cut -f1 -d"]"
RPCClient
rpcclient -U "" -N 13.13.13.13
rpcclient $> enumdomusers
CrackMapExec
crackmapexec smb 13.13.13.13 --users
LDAPSearch
ldapsearch -h 13.13.13.13 -x -b "DC=MILITECH,DC=LOCAL" -s sub "(&(objectclass=user))" | grep sAMAccountName: | cut -f2 -d" "
WindapSearch
./windapsearch.py --dc-ip 13.13.13.13 -u "" -U
Kerbrute
kerbrute userenum -d militech.local --dc 13.13.13.13 /opt/jsmith.txt
Linkedin2Username
Useful tool to generate a userlist from Linkedin [LINK]
python linkedin2username.py -c targetco
Credentialed CME
sudo crackmapexec smb 13.13.13.13 -u sreed -p pwd123 --users