SMB

User named: peter was found.

We could use this in many ways ftp, ssh, bruteforcing hte log in portal.

Null Share

	Sharename       Type      Comment
	---------       ----      -------
	zino            Disk      Logs
	print$          Disk      Printer Drivers
	IPC$            IPC       IPC Service (Samba 4.9.5-Debian)
Reconnecting with SMB1 for workgroup listing.

	Server               Comment
	---------            -------

	Workgroup            Master
	---------            -------
	WORKGROUP

Found peters creds.

batcat misc.log        
───────┬─────────────────────────────────────────────────────────────────────────────────────────────────────────────
       │ File: misc.log
───────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
   1   │ Apr 28 08:39:01 zino systemd[1]: Starting Clean php session files...
   2   │ Apr 28 08:39:01 zino CRON[2791]: (CRON) info (No MTA installed, discarding output)
   3   │ Apr 28 08:39:01 zino systemd[1]: phpsessionclean.service: Succeeded.
   4   │ Apr 28 08:39:01 zino systemd[1]: Started Clean php session files.
   5   │ Apr 28 08:39:01 zino systemd[1]: Set application username "admin"
   6   │ Apr 28 08:39:01 zino systemd[1]: Set application password "adminadmin"
───────┴─────────────────────────────────────────────────────────────────────────────────────────────────────────────

These credentials were valid for the web application.

Last updated