Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- HTB forest __/10.10.10.161
- ./nullinux.py 10.10.10.161 -r 500-800 -a -t 15
- Starting nullinux v5.3.1 | 10-14-2019 17:21
- [*] Enumerating Shares for: 10.10.10.161
- Shares Comments
- -------------------------------------------
- [-] No Shares Detected
- [*] Enumerating Domain Information for: 10.10.10.161
- [+] Domain Name: HTB
- [+] Domain SID: S-1-5-21-3072663084-364016917-1341370565
- [*] Enumerating querydispinfo for: 10.10.10.161
- $331000-VK4ADACQNUCA
- Administrator
- andy
- DefaultAccount
- Guest
- HealthMailbox0659cc1
- HealthMailbox670628e
- HealthMailbox6ded678
- HealthMailbox7108a4e
- HealthMailbox83d6781
- HealthMailbox968e74d
- HealthMailboxb01ac64
- HealthMailboxc0a90c9
- HealthMailboxc3d7722
- HealthMailboxfc9daad
- HealthMailboxfd87238
- krbtgt
- lucinda
- mark
- santi
- sebastien
- SM_1b41c9286325456bb
- SM_1ffab36a2f5f479cb
- SM_2c8eef0a09b545acb
- SM_681f53d4942840e18
- SM_75a538d3025e4db9a
- SM_7c96b981967141ebb
- SM_9b69f1b9d2cc45549
- SM_c75ee099d0a64c91b
- SM_ca8c2ed5bdab4dc9b
- svc-alfresco
- [*] Enumerating enumdomusers for: 10.10.10.161
- Administrator
- Guest
- krbtgt
- DefaultAccount
- $331000-VK4ADACQNUCA
- SM_2c8eef0a09b545acb
- SM_ca8c2ed5bdab4dc9b
- SM_75a538d3025e4db9a
- SM_681f53d4942840e18
- SM_1b41c9286325456bb
- SM_9b69f1b9d2cc45549
- SM_7c96b981967141ebb
- SM_c75ee099d0a64c91b
- SM_1ffab36a2f5f479cb
- HealthMailboxc3d7722
- HealthMailboxfc9daad
- HealthMailboxc0a90c9
- HealthMailbox670628e
- HealthMailbox968e74d
- HealthMailbox6ded678
- HealthMailbox83d6781
- HealthMailboxfd87238
- HealthMailboxb01ac64
- HealthMailbox7108a4e
- HealthMailbox0659cc1
- sebastien
- lucinda
- svc-alfresco
- andy
- mark
- santi
- [*] Enumerating LSA for: 10.10.10.161
- [*] Performing RID Cycling for: 10.10.10.161
- 500
- 501
- 502
- 503
- 504
- 505
- 506
- 507
- 508
- 509
- 510
- 511
- 512
- 513
- 514
- 515
- 516
- 517
- 518
- 519
- 520
- 521
- 522
- 523
- 524
- 525
- 526
- 527
- 528
- 529
- 530
- 531
- 532
- 533
- 534
- 535
- 536
- 537
- 538
- 539
- 540
- 541
- 542
- 543
- 544
- 545
- 546
- 547
- 548
- 549
- 550
- 551
- 552
- 553
- 554
- 555
- 556
- 557
- 558
- 559
- 560
- 561
- 562
- 563
- 564
- 565
- 566
- 567
- 568
- 569
- 570
- 571
- 572
- 573
- 574
- 575
- 576
- 577
- 578
- 579
- 580
- 581
- 582
- 583
- 584
- 585
- 586
- 587
- 588
- 589
- 590
- 591
- 592
- 593
- 594
- 595
- 596
- 597
- 598
- 599
- 600
- 601
- 602
- 603
- 604
- 605
- 606
- 607
- 608
- 609
- 610
- 611
- 612
- 613
- 614
- 615
- 616
- 617
- 618
- 619
- 620
- 621
- 622
- 623
- 624
- 625
- 626
- 627
- 628
- 629
- 630
- 631
- 632
- 633
- 634
- 635
- 636
- 637
- 638
- 639
- 640
- 641
- 642
- 643
- 644
- 645
- 646
- 647
- 648
- 649
- 650
- 651
- 652
- 653
- 654
- 655
- 656
- 657
- 658
- 659
- 660
- 661
- 662
- 663
- 664
- 665
- 666
- 667
- 668
- 669
- 670
- 671
- 672
- 673
- 674
- 675
- 676
- 677
- 678
- 679
- 680
- 681
- 682
- 683
- 684
- 685
- 686
- 687
- 688
- 689
- 690
- 691
- 692
- 693
- 694
- 695
- 696
- 697
- 698
- 699
- 700
- 701
- 702
- 703
- 704
- 705
- 706
- 707
- 708
- 709
- 710
- 711
- 712
- 713
- 714
- 715
- 716
- 717
- 718
- 719
- 720
- 721
- 722
- 723
- 724
- 725
- 726
- 727
- 728
- 729
- 730
- 731
- 732
- 733
- 734
- 735
- 736
- 737
- 738
- 739
- 740
- 741
- 742
- 743
- 744
- 745
- 746
- 747
- 748
- 749
- 750
- 751
- 752
- 753
- 754
- 755
- 756
- 757
- 758
- 759
- 760
- 761
- 762
- 763
- 764
- 765
- 766
- 767
- 768
- 769
- 770
- 771
- 772
- 773
- 774
- 775
- 776
- 777
- 778
- 779
- 780
- 781
- 782
- 783
- 784
- 785
- 786
- 787
- 788
- 789
- 790
- 791
- 792
- 793
- 794
- 795
- 796
- 797
- 798
- 799
- 800
- [*] Testing 10.10.10.161 for Known Users
- [*] Enumerating Group Memberships for: 10.10.10.161
- [+] Group: Enterprise Read-only Domain Controllers
- [+] Group: Domain Admins
- Administrator
- [+] Group: Domain Users
- Administrator
- DefaultAccount
- krbtgt
- $331000-VK4ADACQNUCA
- SM_2c8eef0a09b545acb
- SM_ca8c2ed5bdab4dc9b
- SM_75a538d3025e4db9a
- SM_681f53d4942840e18
- SM_1b41c9286325456bb
- SM_9b69f1b9d2cc45549
- SM_7c96b981967141ebb
- SM_c75ee099d0a64c91b
- SM_1ffab36a2f5f479cb
- HealthMailboxc3d7722
- HealthMailboxfc9daad
- HealthMailboxc0a90c9
- HealthMailbox670628e
- HealthMailbox968e74d
- HealthMailbox6ded678
- HealthMailbox83d6781
- HealthMailboxfd87238
- HealthMailboxb01ac64
- HealthMailbox7108a4e
- HealthMailbox0659cc1
- sebastien
- lucinda
- svc-alfresco
- andy
- mark
- santi
- [+] Group: Domain Guests
- Guest
- [+] Group: Domain Computers
- EXCH01$
- [+] Group: Domain Controllers
- FOREST$
- [+] Group: Schema Admins
- Administrator
- [+] Group: Enterprise Admins
- Administrator
- [+] Group: Group Policy Creator Owners
- Administrator
- [+] Group: Read-only Domain Controllers
- [+] Group: Cloneable Domain Controllers
- [+] Group: Protected Users
- [+] Group: Key Admins
- [+] Group: Enterprise Key Admins
- [+] Group: DnsUpdateProxy
- [+] Group: Organization Management
- Administrator
- [+] Group: Recipient Management
- [+] Group: View-Only Organization Management
- [+] Group: Public Folder Management
- [+] Group: UM Management
- [+] Group: Help Desk
- [+] Group: Records Management
- [+] Group: Discovery Management
- [+] Group: Server Management
- [+] Group: Delegated Setup
- [+] Group: Hygiene Management
- [+] Group: Compliance Management
- [+] Group: Security Reader
- [+] Group: Security Administrator
- [+] Group: Exchange Servers
- EXCH01$
- $D31000-NSEL5BRJ63V7
- [+] Group: Exchange Trusted Subsystem
- EXCH01$
- [+] Group: Managed Availability Servers
- EXCH01$
- Exchange Servers
- [+] Group: Exchange Windows Permissions
- Exchange Trusted Subsystem
- [+] Group: ExchangeLegacyInterop
- [+] Group: $D31000-NSEL5BRJ63V7
- EXCH01$
- [+] Group: Service Accounts
- svc-alfresco
- [+] Group: Privileged IT Accounts
- Service Accounts
- [+] Group: test
- [+] 37 USER(s) identified in 38 GROUP(s)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement