IP: 192.168.159.66

Hashes

Users

tony

Passwords

Creds

========================================================

NMAP

80/tcp open http Microsoft IIS httpd 10.0 |_http-server-header: Microsoft-IIS/10.0 |http-title: H2 Database Engine (redirect) | http-methods: | Potentially risky methods: TRACE 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds? 7680/tcp open pando-pub? 8082/tcp open http H2 database http console |_http-title: H2 Console Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Directory Brute Force

80: “javadoc”

FileBrute Force

Other

445 didnt yield anything

H2 1.4.199

Host Name: JACKO OS Name: Microsoft Windows 10 Pro OS Version: 10.0.18363 N/A Build 18363

========================================================

Foothdold

PrivEsc

witeup

1 item under this folder.