{% hint style="info" %} The guide doesn't make it particularly clear what tool you need to use other than nmap so to save you from acquiring mild brain ache just go over to kali tools to read up on enum4linux. {% endhint %}
Reveal Flag 🚩
🚩enum4linux
What is the NetBIOS-Domain Name of the machine?
Reveal Flag 🚩
🚩THM-AD
What invalid TLD do people commonly use for their Active Directory Domain?
Generic TLDs like .local, .lan, .corp, etc, are now being sold by ICANN, so the domain you’re using internally today – company.local could potentially become another company’s property tomorrow.
{% hint style="warning" %} HINT: The full AD domain is spookysec.local {% endhint %}
Reveal Flag 🚩
🚩.local