$ netsh -r {ipaddress-of-remote-target} dump > cuccecce.txt

If you write this follow command, when running on a remote Domain Controller even from an unprivileged account you can see all domain users.

View this command to comment, vote or add to favourites
View all commands by 0disse0

commandlinefu.com

by David Winterbottom (codeinthehole.com)


Tags: