Identifying Users

Kerbrute - Internal AD Username Enumeration

• Useful Wordlists - https://github.com/insidetrust/statistically-likely-usernames

# Enumerating Users with Kerbrute
kerbrute userenum -d SOMETHING.LOCAL --dc ip jsmith.txt -o valid_ad_users