Finding the domain controller

Let's use the enum_domain module to find the domain controller, as shown in the following screenshot:

We can see that we have details such as the domain, domain controller, and its IP address. The only option required by the module is the session identifier of the Meterpreter gained from the compromised machine.

Get Mastering Metasploit - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.