Making a Target List

Enum4Linux

enum4linux -U 13.13.13.13 | grep "user:" | cut -f2 -d"[" | cut -f1 -d"]"

RPCClient

rpcclient -U "" -N 13.13.13.13
rpcclient $> enumdomusers

CrackMapExec

crackmapexec smb 13.13.13.13 --users

LDAPSearch

ldapsearch -h 13.13.13.13 -x -b "DC=RIOTECH,DC=LOCAL" -s sub "(&(objectclass=user))"  | grep sAMAccountName: | cut -f2 -d" "

WindapSearch

./windapsearch.py --dc-ip 13.13.13.13 -u "" -U

Kerbrute

kerbrute userenum -d riotech.local --dc 13.13.13.13 /opt/jsmith.txt 

Linkedin2Username

Useful tool to generate a userlist from Linkedin [LINK]

python linkedin2username.py -c targetco

Credentialed CME

sudo crackmapexec smb 13.13.13.13 -u rio -p pwd123 --users