# Enumeracion de usuarios

### <mark style="color:red;">**Importancia**</mark><mark style="color:red;">:</mark>&#x20;

Conocer los usuarios permite identificar cuentas valiosas, facilitar ataques de ingeniería social y diseñar ataques dirigidos.&#x20;

### <mark style="color:red;">**Vulnerabilidades posibles**</mark><mark style="color:red;">:</mark>

* Cuentas de usuario con contraseñas débiles o predeterminadas.
* Usuarios con privilegios excesivos.
* Cuentas inactivas que aún tienen acceso.
* Patrones de nomenclatura predecibles que facilitan los ataques.

```powershell
PS C:\> Get-NetUser -properties name, description

name               description                                             
----               -----------                                             
Administrator      Built-in account for administering the computer/domain  
Guest              Built-in account for guest access to the computer/domain
admin                                                                      
krbtgt             Key Distribution Center Service Account                 
regular.user                                                               
dnsadmin.user                                                              
unconstrained.user                                                         
constrained.user                                                           
userwrite.user                                                             
userall.user                                                               
compwrite.user                                                             
gpowrite.user                                                              
lapsread.user      LAPS yet to be implemented                              
groupwrite.user                                                            
writedacldc.user                                                           
readgmsa.user      GMSA yet to be implemented                              
clearpass.user     Remember to remove this! Password@1                     
roast.user                                                                 
asrep.user                                                                 
AdminWebServer
```

{% hint style="danger" %}
Gracias al resultado previo sabemos que hay un usuario con credenciales expuestas en la descripcion.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://books.spartan-cybersec.com/cpad/enumeracion-en-ad/enumeracion-con-powershell-ofensivo/guia-de-comandos-de-powerview.ps1/enumeracion-de-usuarios.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.