🐧
Zino
  • Zino
    • Summary
  • Enumeration
    • TCP
    • UDP
    • Web Services
      • Nikto
      • Dirb Extensions
      • Dirsearch
      • goBuster
    • Other Services
      • FTP
      • SMB
      • mySQL
  • Exploitation
  • Priv Escalation
Powered by GitBook
On this page
  1. Enumeration
  2. Other Services

SMB

PreviousFTPNextmySQL

Last updated 2 years ago

User named: peter was found.

We could use this in many ways ftp, ssh, bruteforcing hte log in portal.

Null Share

	Sharename       Type      Comment
	---------       ----      -------
	zino            Disk      Logs
	print$          Disk      Printer Drivers
	IPC$            IPC       IPC Service (Samba 4.9.5-Debian)
Reconnecting with SMB1 for workgroup listing.

	Server               Comment
	---------            -------

	Workgroup            Master
	---------            -------
	WORKGROUP

Found peters creds.

batcat misc.log        
───────┬─────────────────────────────────────────────────────────────────────────────────────────────────────────────
       │ File: misc.log
───────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
   1   │ Apr 28 08:39:01 zino systemd[1]: Starting Clean php session files...
   2   │ Apr 28 08:39:01 zino CRON[2791]: (CRON) info (No MTA installed, discarding output)
   3   │ Apr 28 08:39:01 zino systemd[1]: phpsessionclean.service: Succeeded.
   4   │ Apr 28 08:39:01 zino systemd[1]: Started Clean php session files.
   5   │ Apr 28 08:39:01 zino systemd[1]: Set application username "admin"
   6   │ Apr 28 08:39:01 zino systemd[1]: Set application password "adminadmin"
───────┴─────────────────────────────────────────────────────────────────────────────────────────────────────────────

These credentials were valid for the web application.