Anonymous login success but no shares.

ldapsearch -H ldap://10.10.10.161 -x -s base namingcontexts
Copy

ldapsearch -H ldap://10.10.10.161 -x -b "DC=htb,DC=local" > ldapSearch.out
Copy

Now to only print data which has object class of person

ldapsearch -H ldap://10.10.10.161 -x -b "DC=htb,DC=local" '(objectClass=Person)' > ldapSearchObjectClassPerson.out
Copy

Enumerating usernames

I don't want to brute Force i ll move on for now.

null username authentication via rpcclient

 rpcclient -U '' 10.10.10.161 -N
Copy

Got a new username -> svc-alfresco