7 MIN READ
Blog Post
Al13nz
Bronze I
25 days agoNice writeup BethHolden
You can also get the final token using smbclient & the discovered users creds - not necessarily a better way to do it as the extra enumeration and smb exploit with metasploit is fun too