Enumerate Domain Users

Enumerate domain users on the remote target

nxc smb 192.168.1.0/24 -u UserNAme -p 'PASSWORDHERE' --users

Export domain users on the remote target

nxc smb <ip> -u UserNAme -p 'PASSWORDHERE' --users-export output.txt