RidRelay is a Python-based tool to enumerate usernames on a domain where you have no credentials by using a with low privileges.

RidRelay - SMB Relay Attack For Username Enumeration  - RidRelay SMB Relay Attack For Username Enumeration 640x352 - SMB Relay Attack For Username Enumeration

How RidRelay SMB Relay Attack Works


  1. Spins up an SMB server and waits for an incoming SMB connection
  2. The incoming credentials are relayed to a specified target, creating a connection with the context of the relayed user

For best results, use with Responder.

Using RidRelay to Enumerate Usernames


Start RidRelay pointing to the target:


Also output usernames to file

You can download RidRelay here:


Or read more here.

Source link


Please enter your comment!
Please enter your name here