Cyber Security 2023 | Active Directory Username Enumeration & Password Spraying using Kerbrute Tool

*Introduction*
This time I am sharing eye-opening security-linked stuff which is until now a very big and crucial challenge in every centralized business, In this short video lecture, I would like to discuss Active Directory Username Enumeration & Password Spraying on Server 2022 – Active Directory Directory Services which is the latest and most secure Microsoft Operating system at the time of this recording.

The Active Directory Server is a hacker’s prime target because of its rank in Identity and Access Management, or managing business identities from one centralized location, and it’s also an essential part of the penetration testing process.

In Active Directory users’ enumeration Hackers and PenTesters develop a list of all valid usernames on a server or web application. By doing so, the hacker can get an idea of how many accounts exist and use this information to compromise accounts on the target.

Including both letters and numbers in a random pattern is safer than using personal identifiers or common phrases. A username that is easier for you to remember is usually easier for a hacker to guess. This is especially true when the username is based on a variation of your email address, name, or home address.

In contrast, after the successful user’s enumeration Hackers and PenTesters strongly wanted to launch password-spraying attacks, this also happens in two steps. An attacker acquires a list of usernames first, then attempts logins across all usernames using the same or single password. The attacker repeats the process with new passwords until the attack breaches the target authentication system to gain account and systems access. In this complete video lecture, I will show you how to successfully launch and accomplish the attack through the kerbrute tool.

*Download a Precompiled Binary for Your OS*
https://github.com/ropnop/kerbrute/releases

*Download a Precompiled Active Directory Users & Password Lists*
https://github.com/Cryilllic/Active-Directory-Wordlists
https://github.com/danielmiessler/SecLists/tree/master/Passwords
https://github.com/danielmiessler/SecLists/tree/master/Usernames