Explore Domain Shares

Explore Domain Shares

# To find out Domain share.
Find-DomainShare

# If not visible correctly.
Find-DomainShare | Format-Table -Wrap -AutoSize

# Listing the shares.
# First we will list the share present on domain controller.
# Default pattern is %SystemRoot%\SYSVOL\Sysvol\domain-name.
# Example:
ls \\dc1.corp.com\sysvol\corp.com\
ls \\FILES04\docshare
# as we do the directory listing in the same we can futher list this.
# example: 
ls \\dc1.corp.com\sysvol\corp.com\Policies

# Enumerate all the shares.

Looking for a Fast way to list all content ??

Try this !!!

tree /F \\DCSRV1.beyond.com\SYSVOL\beyond.com

To decript Group Policy Preferences (GPP) password. we will use gpp-decrypt tool in kali.

# Example:
gpp-decrypt "+bsY0V3d4/KgX3VJdO/vyepPfAN1zMFTiQDApgR92JE"

# Used to check access of current user on shares.
Find-DomainShare -CheckShareAccess

# If not visible correctly.
Find-DomainShare -CheckShareAccess | Format-Table -Wrap -AutoSize