Enumerate Users With Kerberos PREAUTH Not Enabled

Technique Info

Enumerate Kerberos PREAUTH Not Enabled Users With bloodyAD

Command bloodyAD -u robb.stark -p 'sexywolfy' -d north.sevenkingdoms.local --host 192.168.58.12 get search --filter '(&(userAccountControl:1.2.840.113556.1.4.803:=4194304)(!(UserAccountControl:1.2.840.113556.1.4.803:=2)))' --attr sAMAccountName

Example

Enumerate Kerberos PREAUTH Not Enabled Users with PowerView.ps1

Command

Get-DomainUser -PreauthNotRequired -Properties distinguishedname -Verbose 

Example

INSERT_IMAGE_HERE

Related

Related Notes

All Related Notes

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "windows") OR contains(tags, "active-directory") OR contains(tags, "enumeration")
SORT file.ctime DESC

windows

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "windows")
SORT file.ctime DESC

active-directory

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "active-directory")
SORT file.ctime DESC

enumeration

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "enumeration")
SORT file.ctime DESC