SMB
User named: peter was found.
We could use this in many ways ftp, ssh, bruteforcing hte log in portal.
Null Share
Sharename Type Comment
--------- ---- -------
zino Disk Logs
print$ Disk Printer Drivers
IPC$ IPC IPC Service (Samba 4.9.5-Debian)
Reconnecting with SMB1 for workgroup listing.
Server Comment
--------- -------
Workgroup Master
--------- -------
WORKGROUP
Found peters creds.
batcat misc.log
───────┬─────────────────────────────────────────────────────────────────────────────────────────────────────────────
│ File: misc.log
───────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
1 │ Apr 28 08:39:01 zino systemd[1]: Starting Clean php session files...
2 │ Apr 28 08:39:01 zino CRON[2791]: (CRON) info (No MTA installed, discarding output)
3 │ Apr 28 08:39:01 zino systemd[1]: phpsessionclean.service: Succeeded.
4 │ Apr 28 08:39:01 zino systemd[1]: Started Clean php session files.
5 │ Apr 28 08:39:01 zino systemd[1]: Set application username "admin"
6 │ Apr 28 08:39:01 zino systemd[1]: Set application password "adminadmin"
───────┴─────────────────────────────────────────────────────────────────────────────────────────────────────────────
These credentials were valid for the web application.
Last updated