Crackmapexec

Enumerating the Password Policy - from Linux - Credentialed

crackmapexec smb 172.16.5.5 -u avazquez -p Password123 --pass-pol

Credentialed Enumeration

sudo crackmapexec smb 172.16.5.5 -u htb-student -p Academy_student_AD! --users

SMB Password Bruteforce

crackmapexec smb 10.10.110.17 -u /tmp/userlist.txt -p 'Company01!' --local-auth

Using CrackMapExec --users Flag

crackmapexec smb 172.16.5.5 --users