I have a cybersecurity test coming up. We have a practice test, but no solutions. One question involves being given a fresh Kali VM and a target IP on our subnet, and having to discover as many username/password combinations on the device as we can.
I have no idea how to even begin this process. Would someone mind giving me a general outline or the Kali tools involved in finding usernames and passwords on a computer in your subnet? I learned a little about nmap scanning, but don't know if that's even relevant to this question.
It also says that for each owned account, credit will be based on the most privileged group to which it belongs, then lists 3 group names along with point values. Does this mean that the process will be different depending on the group? How should I interpret this?
Any help or suggestions on where to start is greatly appreciated!