7 MIN READ
Blog Post
Al13nz
Bronze II
3 months agoNice writeup BethHolden
You can also get the final token using smbclient & the discovered users creds - not necessarily a better way to do it as the extra enumeration and smb exploit with metasploit is fun too