diff --git a/Yasso.log b/Yasso.log deleted file mode 100644 index 0eb1152..0000000 --- a/Yasso.log +++ /dev/null @@ -1,1185 +0,0 @@ - -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] Find 192.168.248.212 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.212 Find MS17010 (Windows Server 2012 R2 Standard 9600) -[+] 192.168.248.1 8089 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.212 139 open -[+] 192.168.248.1 3306 open -[+] 192.168.248.212 80 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.212 445 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.212 135 open -[+] 192.168.248.1 80 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 135 open -[+] 192.168.248.212 5985 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 22 open -[+] 192.168.248.212 3389 open -[+] 192.168.248.219 5432 open - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] 192.168.248.212 brute smb success [administrator:P@ssw0rd] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] 192.168.248.219 brute ssh success [root:kali] -[+] Memcached 192.168.248.219:11211 unauthorized - -[+] 192.168.248.1 brute smb success [administrator:930517] - -[+] 192.168.248.1 brute mysql success [root:root] - -[+] 192.168.248.219 brute postgres success [admin:admin@123] -[NBTBIOS] 192.168.248.212 - DC02 U Workstation Service - KLION G Domain Name - KLION G Domain Controllers - DC02 U Server Service - KLION U Domain Master Browser - ------------------------------------------- - Windows Server 2012 R2 Standard 9600|Windows Server 2012 R2 Standard 6.3 - NetBIOS domain name : KLION - NetBIOS computer name : DC02 - DNS domain name : klion.local - DNS computer name : Dc02.klion.local - DNS tree name : klion.local -[SMB] IP 192.168.248.212 [domain: KLION hostname: DC02] -[OXID] Hostname Dc02 Network [192.168.248.212] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.0.3 192.168.23.1 192.168.248.1] -[+] 200 http://192.168.248.1 [Nginx] Index of / -[+] 200 http://192.168.248.1:8089 None -[+] 200 http://192.168.248.212 [IIS] IIS Windows Server -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] Find 192.168.248.212 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.212 Find MS17010 (Windows Server 2012 R2 Standard 9600) -[+] 192.168.248.1 8089 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.212 445 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.1 80 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 21 open -[+] 192.168.248.212 80 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.1 139 open -[+] 192.168.248.212 135 open -[+] 192.168.248.212 139 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.212 3389 open -[+] 192.168.248.1 445 open -[+] 192.168.248.212 5985 open -[+] 192.168.248.1 3306 open - -[+] 192.168.248.1 brute smb success [administrator:930517] - -[+] 192.168.248.212 brute smb success [administrator:P@ssw0rd] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.1 brute mysql success [root:root] - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] 192.168.248.219 brute postgres success [admin:admin@123] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] -[+] Memcached 192.168.248.219:11211 unauthorized -[NBTBIOS] 192.168.248.212 - DC02 U Workstation Service - KLION G Domain Name - KLION G Domain Controllers - DC02 U Server Service - KLION U Domain Master Browser - ------------------------------------------- - Windows Server 2012 R2 Standard 9600|Windows Server 2012 R2 Standard 6.3 - NetBIOS domain name : KLION - NetBIOS computer name : DC02 - DNS domain name : klion.local - DNS computer name : Dc02.klion.local - DNS tree name : klion.local -[SMB] IP 192.168.248.212 [domain: KLION hostname: DC02] -[OXID] Hostname Dc02 Network [192.168.248.212] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.0.3 192.168.23.1 192.168.248.1] -[+] 200 http://192.168.248.1 [Nginx] Index of / -[+] 200 http://192.168.248.1:8089 None -[+] 200 http://192.168.248.212 [IIS] IIS Windows Server -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.212 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.212 Find MS17010 (Windows Server 2012 R2 Standard 9600) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 3306 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.212 80 open -[+] 192.168.248.212 5985 open -[+] 192.168.248.212 445 open -[+] 192.168.248.1 8089 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 80 open -[+] 192.168.248.219 22 open -[+] 192.168.248.212 139 open -[+] 192.168.248.212 3389 open -[+] 192.168.248.212 135 open - -[+] 192.168.248.212 brute smb success [administrator:P@ssw0rd] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] 192.168.248.1 brute mysql success [root:root] - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] 192.168.248.219 brute postgres success [admin:admin@123] -[+] Memcached 192.168.248.219:11211 unauthorized - -[+] 192.168.248.1 brute smb success [administrator:930517] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] -[NBTBIOS] 192.168.248.212 - DC02 U Workstation Service - KLION G Domain Name - KLION G Domain Controllers - DC02 U Server Service - KLION U Domain Master Browser - ------------------------------------------- - Windows Server 2012 R2 Standard 9600|Windows Server 2012 R2 Standard 6.3 - NetBIOS domain name : KLION - NetBIOS computer name : DC02 - DNS domain name : klion.local - DNS computer name : Dc02.klion.local - DNS tree name : klion.local -[SMB] IP 192.168.248.212 [domain: KLION hostname: DC02] -[OXID] Hostname Dc02 Network [192.168.248.212] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.0.3 192.168.23.1 192.168.248.1] -[+] 200 http://192.168.248.212 [IIS] IIS Windows Server -[+] 200 http://192.168.248.1 [Nginx] Index of / -[+] 200 http://192.168.248.1:8089 None -[+] Find 192.168.248.219 (ping) -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.212 (ping) -[+] 192.168.248.212 Find MS17010 (Windows Server 2012 R2 Standard 9600) -[+] 192.168.248.212 135 open -[+] 192.168.248.212 139 open -[+] 192.168.248.212 3389 open -[+] 192.168.248.212 80 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.212 5985 open -[+] 192.168.248.212 445 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 11211 open - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] 192.168.248.212 brute smb success [administrator:P@ssw0rd] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] 192.168.248.219 brute postgres success [admin:admin@123] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] -[+] Memcached 192.168.248.219:11211 unauthorized -[NBTBIOS] 192.168.248.212 - DC02 U Workstation Service - KLION G Domain Name - KLION G Domain Controllers - DC02 U Server Service - KLION U Domain Master Browser - ------------------------------------------- - Windows Server 2012 R2 Standard 9600|Windows Server 2012 R2 Standard 6.3 - NetBIOS domain name : KLION - NetBIOS computer name : DC02 - DNS domain name : klion.local - DNS computer name : Dc02.klion.local - DNS tree name : klion.local -[SMB] IP 192.168.248.212 [domain: KLION hostname: DC02] -[OXID] Hostname Dc02 Network [192.168.248.212] -[+] 200 http://192.168.248.212 [IIS] IIS Windows Server -[+] Find 59.69.128.56 (ping) -[+] Find 59.69.128.97 (ping) -[+] Find 59.69.128.100 (ping) -[+] Find 59.69.128.98 (ping) -[+] Find 59.69.128.92 (ping) -[+] Find 59.69.128.26 (ping) -[+] Find 59.69.128.8 (ping) -[+] Find 59.69.128.11 (ping) -[+] Find 59.69.128.9 (ping) -[+] Find 59.69.128.113 (ping) -[+] Find 59.69.128.84 (ping) -[+] Find 59.69.128.119 (ping) -[+] Find 59.69.128.117 (ping) -[+] Find 59.69.128.96 (ping) -[+] Find 59.69.128.120 (ping) -[+] Find 59.69.128.1 (ping) -[+] Find 59.69.128.10 (ping) -[+] Find 59.69.128.129 (ping) -[+] Find 59.69.128.67 (ping) -[+] Find 59.69.128.17 (ping) -[+] 59.69.128.1 80 open -[+] 59.69.128.10 22 open -[+] 59.69.128.67 80 open -[+] 59.69.128.17 443 open -[+] 59.69.128.1 443 open -[+] 59.69.128.120 80 open -[+] 59.69.128.120 22 open -[+] 59.69.128.113 443 open -[+] 59.69.128.56 80 open -[+] 59.69.128.113 9000 open -[+] 59.69.128.11 22 open -[+] 403 http://59.69.128.113 403 Forbidden -[+] 403 https://59.69.128.113 403 Forbidden -[+] 302 http://59.69.128.113:9000/account/login/?next=/ 302 Found -[+] 301 https://59.69.128.1/simple/view/login.html -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.212 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.212 Find MS17010 (Windows Server 2012 R2 Standard 9600) -[+] 192.168.248.1 80 open -[+] 192.168.248.212 445 open -[+] 192.168.248.212 3389 open -[+] 192.168.248.212 80 open -[+] 192.168.248.1 3306 open -[+] 192.168.248.1 445 open -[+] 192.168.248.212 135 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.212 139 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 22 open -[+] 192.168.248.212 5985 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 5432 open - -[+] 192.168.248.212 brute smb success [administrator:P@ssw0rd] - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] 192.168.248.1 brute mysql success [root:root] - -[+] 192.168.248.1 brute smb success [administrator:930517] -[+] Memcached 192.168.248.219:11211 unauthorized - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] 192.168.248.219 brute postgres success [admin:admin@123] -[NBTBIOS] 192.168.248.212 - DC02 U Workstation Service - KLION G Domain Name - KLION G Domain Controllers - DC02 U Server Service - KLION U Domain Master Browser - ------------------------------------------- - Windows Server 2012 R2 Standard 9600|Windows Server 2012 R2 Standard 6.3 - NetBIOS domain name : KLION - NetBIOS computer name : DC02 - DNS domain name : klion.local - DNS computer name : Dc02.klion.local - DNS tree name : klion.local -[SMB] IP 192.168.248.212 [domain: KLION hostname: DC02] -[OXID] Hostname Dc02 Network [192.168.248.212] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.0.3 192.168.23.1 192.168.248.1] -[+] 200 http://192.168.248.212 [IIS] IIS Windows Server -[+] 200 http://192.168.248.1 [Nginx] Index of / -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.212 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.212 Find MS17010 (Windows Server 2012 R2 Standard 9600) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 80 open -[+] 192.168.248.212 5985 open -[+] 192.168.248.219 22 open -[+] 192.168.248.212 135 open -[+] 192.168.248.1 445 open -[+] 192.168.248.212 445 open -[+] 192.168.248.1 3306 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 21 open -[+] 192.168.248.212 80 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.212 3389 open -[+] 192.168.248.212 139 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 6379 open - -[+] 192.168.248.212 brute smb success [administrator:P@ssw0rd] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] 192.168.248.1 brute smb success [administrator:930517] - -[+] 192.168.248.1 brute mysql success [root:root] -[+] Memcached 192.168.248.219:11211 unauthorized - -[+] 192.168.248.219 brute postgres success [admin:admin@123] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] -[NBTBIOS] 192.168.248.212 - DC02 U Workstation Service - KLION G Domain Name - KLION G Domain Controllers - DC02 U Server Service - KLION U Domain Master Browser - ------------------------------------------- - Windows Server 2012 R2 Standard 9600|Windows Server 2012 R2 Standard 6.3 - NetBIOS domain name : KLION - NetBIOS computer name : DC02 - DNS domain name : klion.local - DNS computer name : Dc02.klion.local - DNS tree name : klion.local -[SMB] IP 192.168.248.212 [domain: KLION hostname: DC02] -[OXID] Hostname Dc02 Network [192.168.248.212] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.0.3 192.168.23.1 192.168.248.1] -[+] 200 http://192.168.248.212 [IIS] IIS Windows Server -[+] 200 http://192.168.248.1 [Nginx] Index of / -unknown command "go" for "Yasso" - -Did you mean this? - ps - -[+] Find 192.168.248.212 (ping) -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.212 Find MS17010 (Windows Server 2012 R2 Standard 9600) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 445 open -[+] 192.168.248.212 5985 open -[+] 192.168.248.219 21 open -[+] 192.168.248.1 80 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 3306 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.212 445 open -[+] 192.168.248.212 80 open -[+] 192.168.248.212 135 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.212 139 open -[+] 192.168.248.219 22 open -[+] 192.168.248.212 3389 open - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] 192.168.248.212 brute smb success [administrator:P@ssw0rd] - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] 192.168.248.1 brute smb success [administrator:930517] -[+] Memcached 192.168.248.219:11211 unauthorized - -[+] 192.168.248.219 brute postgres success [admin:admin@123] - -[+] 192.168.248.1 brute mysql success [root:root] -[NBTBIOS] 192.168.248.212 - DC02 U Workstation Service - KLION G Domain Name - KLION G Domain Controllers - DC02 U Server Service - KLION U Domain Master Browser - ------------------------------------------- - Windows Server 2012 R2 Standard 9600|Windows Server 2012 R2 Standard 6.3 - NetBIOS domain name : KLION - NetBIOS computer name : DC02 - DNS domain name : klion.local - DNS computer name : Dc02.klion.local - DNS tree name : klion.local -[SMB] IP 192.168.248.212 [domain: KLION hostname: DC02] -[OXID] Hostname Dc02 Network [192.168.248.212] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.0.3 192.168.23.1 192.168.248.1] -[+] 200 http://192.168.248.212 [IIS] IIS Windows Server -[+] 200 http://192.168.248.1 [Nginx] Index of / -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.219 27017 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 22 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 135 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 8080 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 11211 open - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] 192.168.248.1 brute smb success [administrator:930517] - -[+] 192.168.248.219 brute postgres success [admin:admin@123] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ftp success [kali:kali] -[+] Memcached 192.168.248.219:11211 unauthorized -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.23.1 192.168.248.1 192.168.0.3] -[+] 404 http://192.168.248.1:8080 None - -[*] Brute Module [ssh] - -[*] Have [user:2] [pass:3] [request:6] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:2] [pass:3] [request:6] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:4] [request:20] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:4] [request:20] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:4] [request:5120] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:3] [request:3840] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:3] [request:15] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:3] [request:15] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:3] [request:15] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:3] [request:15] - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:3] [request:15] - -[*] Brute Module [ssh] - -[*] Have [user:4] [pass:3] [request:12] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:4] [pass:3] [request:12] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:4] [pass:3] [request:12] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:4] [pass:4] [request:16] - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:4] [pass:4] [request:16] - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[*] brute ssh done - -[*] Brute Module [rdp] - -[*] Have [user:1] [pass:4] [request:4] - -[*] brute rdp done - -[*] Brute Module [rdp] - -[*] Have [user:1] [pass:3] [request:3] - -[*] brute rdp done - -[*] Brute Module [ssh] - -[*] Have [user:1] [pass:3] [request:3] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:2] [pass:3] [request:6] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:2] [pass:4] [request:8] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[*] brute ssh done - -[*] Brute Module [rdp] - -[*] Have [user:2] [pass:2] [request:4] - -[+] 192.168.248.215 brute rdp success [administrator:930517] - -[*] brute rdp done - -[*] Brute Module [rdp] - -[*] Have [user:2] [pass:3] [request:6] - -[+] 192.168.248.215 brute rdp success [administrator:930517] - -[*] brute rdp done - -[*] May be you want to brute? try to add --crack - -[*] Brute Module [rdp] - -[*] Have [user:2] [pass:3] [request:6] - -[+] 192.168.248.215 brute rdp success [klion.local\administrator:930517] - -[*] brute rdp done - -[*] Brute Module [rdp] - -[*] Have [user:2] [pass:1] [request:2] - -[+] 192.168.248.215 brute rdp success [klion.local\administrator:930517] - -[*] brute rdp done - -[*] Brute Module [rdp] - -[*] Have [user:2] [pass:3] [request:6] - -[+] 192.168.248.215 brute rdp success [klion.local\administrator:930517] - -[*] brute rdp done - -[*] Brute Module [rdp] - -[*] Have [user:2] [pass:3] [request:6] - -[+] 192.168.248.215 brute rdp success [klion.local\administrator:930517] - -[*] brute rdp done - -[ERROR] Open administrator,Oadmin is failed,please check your user dic path - -[*] Brute Module [ssh] - -[*] Have [user:0] [pass:0] [request:0] - -[*] brute ssh done - -[ERROR] Open administrator,Oadmin is failed,please check your user dic path - -[*] Brute Module [rdp] - -[*] Have [user:0] [pass:0] [request:0] - -[*] brute rdp done - -[*] Brute Module [rdp] - -[*] Have [user:2] [pass:2] [request:4] - -[+] 192.168.248.215 brute rdp success [administrator:930517] - -[*] brute rdp done - -[*] Brute Module [rdp] - -[*] Have [user:3] [pass:1] [request:768] - -[*] brute rdp done -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 5985 open -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 135 open -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 135 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 5985 open -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 445 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 445 open -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.1 445 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 6379 open -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 135 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 22 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 6379 open -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 135 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.1 445 open -[+] 192.168.248.219 21 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 5432 open -[+] Find 192.168.248.219 (ping) -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 135 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 21 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 22 open - -[+] Mongodb 192.168.248.219 unauthorized - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] -[+] Memcached 192.168.248.219:11211 unauthorized -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.23.1 192.168.248.1 192.168.0.3] -[+] 200 http://192.168.248.1:8848 [Node.js] None -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 135 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 21 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 445 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 22 open -[+] Memcached 192.168.248.219:11211 unauthorized - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] Mongodb 192.168.248.219 unauthorized -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.23.1 192.168.248.1 192.168.0.3] -[+] 200 http://192.168.248.1:8848 [Node.js] None -[+] Find 192.168.248.1 (ping) -[+] Find 192.168.248.219 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 135 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 445 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 11211 open - -[+] Mongodb 192.168.248.219 unauthorized - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] -[+] Memcached 192.168.248.219:11211 unauthorized -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.23.1 192.168.248.1 192.168.0.3] -[+] 200 http://192.168.248.1:8848 [Node.js] None - -[*] Brute Module [ssh] - -[*] Have [user:1] [pass:1] [request:1] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:69] [request:345] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:69] [request:345] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:69] [request:345] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:69] [request:345] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:2] [pass:2] [request:4] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] - -[*] brute ssh done - -[*] Brute Module [ssh] - -[*] Have [user:5] [pass:69] [request:345] - -[+] 192.168.248.219 brute ssh success [root:kali] - -[+] 192.168.248.219 brute ssh success [kali:kali] -[+] Find 192.168.248.219 (ping) -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 135 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.1 445 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 11211 open - -[+] 192.168.248.1 brute smb success [administrator:930517] - -[+] 192.168.248.219 brute ftp success [kali:kali] - -[+] Mongodb 192.168.248.219 unauthorized - -[+] 192.168.248.219 brute mongodb success [admin:123456] - -[+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - -[+] 192.168.248.219 brute postgres success [admin:admin@123] - -[+] 192.168.248.219 brute ssh success [root:kali] -[+] Memcached 192.168.248.219:11211 unauthorized -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.23.1 192.168.248.1 192.168.0.3] -[+] 200 http://192.168.248.1:8848 [Node.js] None -[+] Find 192.168.248.219 (ping) -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 445 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.1 139 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 5432 open - [+] 192.168.248.219 brute ftp success [kali:kali] - [+] Mongodb 192.168.248.219 unauthorized - [+] 192.168.248.219 brute mongodb success [admin:123456] - [+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] - [+] 192.168.248.219 brute ssh success [root:kali] -[+] Memcached 192.168.248.219:11211 unauthorized - [+] 192.168.248.219 brute postgres success [admin:admin@123] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.23.1 192.168.248.1 192.168.0.3] -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 445 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.219 27017 open -[+] 192.168.248.219 5432 open -[+] 192.168.248.219 11211 open -[+] 192.168.248.219 21 open -[+] 192.168.248.219 22 open -[+] 192.168.248.219 6379 open -[+] 192.168.248.1 3306 open -[+] 192.168.248.1 135 open - [+] 192.168.248.1 brute smb success [administrator:930517] - [+] Mongodb 192.168.248.219 unauthorized - [+] 192.168.248.219 brute mongodb success [admin:123456] - [+] 192.168.248.219 brute postgres success [admin:admin@123] - [+] 192.168.248.1 brute mysql success [root:root] -[+] Memcached 192.168.248.219:11211 unauthorized - [+] 192.168.248.219 brute ftp success [kali:kali] - [+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[12186] -[OXID] Hostname LAPTOP-ESQC1EPT Network [192.168.0.3 192.168.23.1 192.168.248.1] -[+] 200 http://192.168.248.1:8848 [Node.js] None -flag needs an argument: --rekey -Redis Auth failed dial tcp 192.168.248.1:6379: i/o timeout -Redis Auth failed dial tcp 192.168.248.219:6379: i/o timeout -Redis Auth failed dial tcp 192.168.248.219:6379: i/o timeout -Redis Auth failed dial tcp 192.168.248.219:6379: i/o timeout - [+] Redis 192.168.248.219:6379 unauthorized -[+] os:[Linux 5.10.0-kali7-amd64 x86_64] path:[] dbfilename:[dump.rdb] pid:[6105] -[+] Restore the original dbfilename -[+] Write ssh key Success -Redis Auth failed dial tcp 118.178.225.48:6379: i/o timeout -Redis Auth failed dial tcp 118.178.225.48:6379: i/o timeout -Redis Auth failed dial tcp 118.178.225.48:6379: i/o timeout -invalid argument "10" for "--timeout" flag: time: missing unit in duration "10" -Redis Auth failed dial tcp 118.178.225.48:6379: i/o timeout -[*] May be your want use redis extend ? Try to add --rekey or --rebound -flag needs an argument: --rekey - [+] Redis 192.168.248.219:6379 Login Success os:[] path:[] dbfilename:[dump.rdb] pid:[] -[+] Restore the original dbfilename -[+] Write ssh key Success - [+] Redis 192.168.248.219:6379 Login Success os:[] path:[] dbfilename:[dump.rdb] pid:[] -[+] Restore the original dbfilename -[+] Write ssh key Success - [+] Redis 192.168.248.219:6379 Login Success os:[] path:[] dbfilename:[dump.rdb] pid:[] -[+] Restore the original dbfilename -[+] Write ssh key Success - [-] Login ssh failed ssh: no key found - [-] Login ssh failed ssh: handshake failed: ssh: unable to authenticate, attempted methods [none publickey], no supported methods remain - [+] Redis 192.168.248.219:6379 Login Success os:[] path:[] dbfilename:[dump.rdb] pid:[] -[+] Restore the original dbfilename -[+] Write ssh key Success -[+] Execute Method: xp_cmdshell -[+] Command: whoami -nt service\mssqlserver - -[+] ALTER DATABASE master SET TRUSTWORTHY ON -[+] SQLKit ==> WarSQLKit -[+] Import the assembly -[+] Link the assembly to a stored procedure -[+] Install SQLKit successful! -[+] Please Use SQL Connect Tools to Execute -[+] WarSQLKit Command Help --kithelp [1,2] -[+] Execute Method: xp_cmdshell -[+] Command: whoami -nt service\mssqlserver - -nt service\mssqlserver - - - -Windows IP 配置 - - -以太网适配器 Ethernet0: - - 连接特定的 DNS 后缀 . . . . . . . : - 本地链接 IPv6 地址. . . . . . . . : fe80::29ae:6020:b5ec:f514%8 - IPv4 地址 . . . . . . . . . . . . : 192.168.248.128 - 子网掩码 . . . . . . . . . . . . : 255.255.255.0 - 默认网关. . . . . . . . . . . . . : 192.168.248.2 - -以太网适配器 以太网: - - 媒体状态 . . . . . . . . . . . . : 媒体已断开连接 - 连接特定的 DNS 后缀 . . . . . . . : - -以太网适配器 蓝牙网络连接: - - 媒体状态 . . . . . . . . . . . . : 媒体已断开连接 - 连接特定的 DNS 后缀 . . . . . . . : - - -flag needs an argument: --kithelp -[!] mssql: “whoami”附近有语法错误。 -[!] mssql: “whoami”附近有语法错误。 -[!] mssql: “whoami”附近有语法错误。 -Token Privilege Adjusted -Starting DCERPC NTLM Relay... -DCOM Started - - -Token Privilege Adjusted -Starting DCERPC NTLM Relay... -DCOM Started - - -[+] SQLKit ==> WarSQLKit -[+] Uninstall SQLKit successful! -[+] ALTER DATABASE master SET TRUSTWORTHY ON -[+] SQLKit ==> SharpSQLKit -[+] Import the assembly -[+] Link the assembly to a stored procedure -[+] Install SQLKit successful! -[+] Please Use SQL Connect Tools to Execute -[+] WarSQLKit Command Help --kithelp [1,2] -[!] mssql: 找不到存储过程 'sp_cmdExec'。 -[+] SQLKit ==> SharpSQLKit -[+] Uninstall SQLKit successful! -[+] Execute Method: xp_cmdshell -[+] Command: whoami -nt service\mssqlserver - -[+] Execute Method: ole echo -[+] Command: whoami -nt service\mssqlserver - -[+] Execute Method: ole echo -[+] Command: whoami -nt service\mssqlserver - -Session wait failed Process exited with status 127 - [-] Login ssh failed ssh: handshake failed: ssh: unable to authenticate, attempted methods [none publickey], no supported methods remain - [+] Redis 192.168.248.219:6379 Login Success os:[] path:[] dbfilename:[dump.rdb] pid:[] -[+] Restore the original dbfilename -[+] Write ssh key Success -[+] Execute Method: ole echo -[+] Command: whoami -nt service\mssqlserver - -[+] Execute Method: ole echo -[+] Command: ipconfig - -Windows IP 配置 - - -以太网适配器 Ethernet0: - - 连接特定的 DNS 后缀 . . . . . . . : - 本地链接 IPv6 地址. . . . . . . . : fe80::29ae:6020:b5ec:f514%8 - IPv4 地址 . . . . . . . . . . . . : 192.168.248.128 - 子网掩码 . . . . . . . . . . . . : 255.255.255.0 - 默认网关. . . . . . . . . . . . . : 192.168.248.2 - -以太网适配器 以太网: - - 媒体状态 . . . . . . . . . . . . : 媒体已断开连接 - 连接特定的 DNS 后缀 . . . . . . . : - -以太网适配器 蓝牙网络连接: - - 媒体状态 . . . . . . . . . . . . : 媒体已断开连接 - 连接特定的 DNS 后缀 . . . . . . . : - -unknown shorthand flag: 'H' in -H -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 445 open - [+] 192.168.248.1 brute smb success [administrator:930517] -[+] Find 192.168.248.1 (ping) -[+] Find 127.0.0.1:8080 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 139 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 135 open - [+] 192.168.248.1 brute smb success [administrator:930517] -[+] Find 192.168.248.1 (ping) -[+] Find 127.0.0.1:8080 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] Find 127.0.0.1:8080 (ping) -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] Find 192.168.248.1 (ping) -[+] Find 127.0.0.1:8080 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 445 open - [+] 192.168.248.1 brute smb success [administrator:930517] -[+] Find 127.0.0.1:8080 (ping) -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 139 open - [+] 192.168.248.1 brute smb success [administrator:930517] -[+] Find 127.0.0.1:5985 (ping) -[+] Find 192.168.248.1 (ping) -[+] Find 127.0.0.1:445 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 135 open - [+] 192.168.248.1 brute smb success [administrator:930517] - [+] 127.0.0.1 brute smb success [administrator:930517] -[+] Find 127.0.0.1:5985 (ping) -[+] Find 127.0.0.1:445 (ping) -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 127.0.0.1 5985 open -[+] 127.0.0.1 445 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 5985 open -[+] 192.168.248.1 139 open - [+] 192.168.248.1 brute smb success [administrator:930517] - [+] 127.0.0.1 brute smb success [administrator:930517] -[+] Find 127.0.0.1:5985 (ping) -[+] Find 127.0.0.1:445 (ping) -[+] Find 192.168.248.1 (ping) -[+] 192.168.248.1 Find CVE-2020-0796 -[+] 127.0.0.1 5985 open -[+] 127.0.0.1 445 open -[+] 192.168.248.1 135 open -[+] 192.168.248.1 445 open -[+] 192.168.248.1 139 open -[+] 192.168.248.1 5985 open - [+] 192.168.248.1 brute smb success [administrator:930517] - [+] 127.0.0.1 brute smb success [administrator:930517] \ No newline at end of file