Domain Share Hunting

Active Directory AD Enumeration windows linux

PowerView

Find-DomainShare
Find-DomainShare -CheckShareAccess

NetExec spider

netexec smb $target -u svc-admin -p 'management2005' -M spider_plus -o DOWNLOAD_FLAG=True

netexec smb $target -u 'guest' -p '' --shares

Spider NETLOGON for credentials

netexec smb $target -u 'a-whitehat' -p 'bNdKVkjv3RR9ht' --spider NETLOGON --regex .