Lookupsid

Windows SID brute forcer example through [MS-LSAT] MSRPC Interface, aiming at finding remote users/groups.

Requirements:

  • Domain

  • Username

  • Password/Password Hash

  • Target IP Address

# synthax
lookupsid.py $domain/$user:$password/$password_hash@$target_ip

# example
lookupsid.py hazard:stealth1agent@10.10.10.149

Last updated