Null Session

---

Edit /etc/resolv.conf to prioritize the DC.

Enum DCs:

nslookup -type=SVR _ldap._tcp.FQDN

Use smbclient to check against all DCs

for dc in $(cat dcs.txt); do echo $dc && smbclient -N -L \\\\$dc; done; 

or: auth.py

auth smb <dcs.txt> 

note

anon login != unauth enum, you should try to pull info to show impact.

Try to pull users:

enum4linux-ng -U <DC>