We have already gained access to some of the crucial credentials of the domain controller. But we should never limit ourselves in terms of the possibility of finding more information on the target. Let's get started:
We can see that issuing the adsi_computer_enum on the pyssg.com domain enumerates many other systems on the network that were previously unknown. Most of the systems are running the Windows 10 Pro Edition operating system. Let's see what else we can get:
We can also find the domain controller ...
