During an assessment a penetration tester runs the following command: cme smb 192.168.9.14 -u alice -p Alice2021 --users Which of the following is the penetration tester trying to do?

The correct answer is C. Enumerate domain users. The command uses CrackMapExec (CME), a popular post-exploitation tool for interacting with SMB (Server Message Block) and Active Directory environments. The key elements of the cme smb 192.168.9.14: Specifies the target IP and the SMB protocol. -u alice -p Alice2021: Supplies…

Reconnaissance and enumeration

Question

During an assessment a penetration tester runs the following command:

cme smb 192.168.9.14 -u alice -p Alice2021 --users Which of the following is the penetration tester trying to do?

Options

ABrute force local users
BCrack the password
CEnumerate domain users
DPerform a dictionary attack

How the community answered

(34 responses)

A
3% (1)
B
6% (2)
C
88% (30)
D
3% (1)

Explanation

The command uses CrackMapExec (CME), a popular post-exploitation tool for interacting with SMB (Server Message Block) and Active Directory environments. The key elements of the cme smb 192.168.9.14: Specifies the target IP and the SMB protocol. -u alice -p Alice2021: Supplies the username and password for authentication. --users: Indicates that the tester is attempting to enumerate domain users. This command attempts to authenticate with the provided credentials (alice and Alice2021) on the SMB service of the target host. If successful, it lists the domain users accessible on the system, allowing the tester to gather information about potential targets in the network.

Topics

#CrackMapExec#User enumeration#SMB#Information gathering

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice