Enumerate SCCM (MECM) using LDAP

Technique Info

Enumerate SCCM/MECM Using sccmhunter.py with valid creds

Command

python3 sccmhunter.py find -u carol -p SCCMftw -d sccm.lab -dc-ip 192.168.33.10 -debug

Example (source: https://mayfly277.github.io/posts/SCCM-LAB-part0x1/)

Enumerate SCCM/MECM with sccmhunter.py

Command

python3 sccmhunter.py smb -u carol -p 'SCCMftw' -d sccm.lab -dc-ip 192.168.33.10 -debug

Example

Show all sccmhunter.py results

Command

python3 sccmhunter.py show -all

Example (source: https://mayfly277.github.io/posts/SCCM-LAB-part0x1/)

Enumerate SCCM/MECM Using ldeep with valid creds

Command

ldeep ldap -u carol -p SCCMftw -d SCCM.lab -s ldap://192.168.33.10 sccm

Example (source: https://mayfly277.github.io/posts/SCCM-LAB-part0x1/ )

Enumerate SCCM/MECM Using ldeep with valid creds

Command

ldeep ldap -u carol -p SCCMftw -d SCCM.lab -s ldap://192.168.33.10 search "(objectclass=mssmsmanagementpoint)" dnshostname,msSMSSiteCode

Example (source: https://mayfly277.github.io/posts/SCCM-LAB-part0x1/ )

Related

Related Notes

All Related Notes

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "windows") OR contains(tags, "active-directory") OR contains(tags, "enumeration") OR contains(tags, "sccm") OR contains(tags, "intune")
SORT file.ctime DESC

windows

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "windows")
SORT file.ctime DESC

active-directory

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "active-directory")
SORT file.ctime DESC

enumeration

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "enumeration")
SORT file.ctime DESC

sccm

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "sccm")
SORT file.ctime DESC

intune

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "intune")
SORT file.ctime DESC