Windows Enumeration Category

blog
8+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Windows Enumeration blog

Filters

  • samrdump.py Impacket: Enumerate Windows Users via SAMR
    tools

    samrdump.py Impacket: Enumerate Windows Users via SAMR

    Impacket's samrdump.py guide to enumerate Windows users via MS-SAMR over SMB, get RID and account attributes with passwords, NTLM or Kerberos hashes.

    Discover more Discover more
  • Windows Filesystem: NTFS, Folders, and Registry for Pentesting
    windows

    Windows Filesystem: NTFS, Folders, and Registry for Pentesting

    A practical guide to the Windows file system for pentesting: NTFS, system folders, the registry, ACLs, enumeration commands, privilege escalation, and detection.

    Discover more Discover more
  • GetADUsers.py Inpacket: Enumerate Active Directory Users
    tools

    GetADUsers.py Inpacket: Enumerate Active Directory Users

    Impacket's GetADUsers.py guide to enumerate Active Directory users via LDAP with password, NTLM hash, AES or Kerberos key and parse pwdLastSet and lastLogon.

    Discover more Discover more
  • Smbexec: SMB Remote Execution and Lateral Movement in Active Directory
    windows

    Smbexec: SMB Remote Execution and Lateral Movement in Active Directory

    SMBExec: A Practical Guide to Windows Remote Execution: Stealthy Lateral Movement via SMB Without Disk Files. A Fileless Alternative to PsExec for AD Pentesting.

    Discover more Discover more
  • Smbmap: SMB Enumeration and Share Discovery on Windows
    tools

    Smbmap: SMB Enumeration and Share Discovery on Windows

    smbmap explained for pentests: SMB share enumeration, permissions, file access, and credential testing on Windows and Active Directory systems.

    Discover more Discover more
  • Seatbelt: Windows Enumeration for Post-Exploitation and Situational Awareness
    windows

    Seatbelt: Windows Enumeration for Post-Exploitation and Situational Awareness

    Seatbelt is a Windows enumeration tool that collects system, user, privilege, and configuration information useful for privilege escalation.

    Discover more Discover more
  • Sherlock: Automated Windows Privilege Escalation Checker
    windows

    Sherlock: Automated Windows Privilege Escalation Checker

    Sherlock identifies privilege escalation vulnerabilities on Windows by comparing installed patches and known CVEs. A quick tool for local privilege discovery.

    Discover more Discover more
  • enum4linux-ng: SMB and Active Directory enumeration
    tools

    enum4linux-ng: SMB and Active Directory enumeration

    Complete guide to enum4linux-ng for SMB and Active Directory enumeration: users, groups, shares, policies, SID/RID, authentication, and practical commands.

    Discover more Discover more