Please enable JavaScript.
Coggle requires JavaScript to display documents.
10.11.1.5 - Coggle Diagram
10.11.1.5
445
Microsoft Windows XP microsoft-ds
smb
nmap --script smb-vuln* -Pn -p 139,445 {IP}
smb-vuln-ms08-067
login required :!:
smb-vuln-ms17-010
login required :!:
smbmap
IPC$ NO ACCESS Remote IPC
ADMIN$ NO ACCESS Remote Admin
C$ NO ACCESS Default share
enum4linux
//10.11.1.5/IPC$ Mapping: OK Listing: DENIED Writing: N/A
//10.11.1.5/ADMIN$ Mapping: DENIED Listing: N/A Writing: N/A
//10.11.1.5/C$ Mapping: DENIED Listing: N/A Writing: N/A
Domain Name
THINC
username
smb-enum (nmap)
| smb-enum-shares:
| account_used: <blank>
| \10.11.1.5\ADMIN$:
| Type: STYPE_DISKTREE_HIDDEN
| Comment: Remote Admin
| Anonymous access: <none>
| \10.11.1.5\C$:
| Type: STYPE_DISKTREE_HIDDEN
| Comment: Default share
| Anonymous access: <none>
| \10.11.1.5\IPC$:
| Type: STYPE_IPC_HIDDEN
| Comment: Remote IPC
|_ Anonymous access: READ
nbtscan
10.11.1.5 ALICE <server> ALICE 00:50:56:ba:4c:57
135
Microsoft Windows RPC
rpcdump
Protocol: [MS-MSRP]: Messenger Service Remote Protocol
Provider: msgsvc.dll
UUID : 5A7B91F8-FF00-11D0-A9B2-00C04FB6E6FC v1.0 Messenger Service
Bindings:
ncadg_ip_udp:10.11.1.5[1028]
ncacn_np:\ALICE[\PIPE\msgsvc]
ncacn_np:\ALICE[\PIPE\srvsvc]
ncalrpc:[senssvc]
ncalrpc:[trkwks]
ncacn_np:\ALICE[\pipe\trkwks]
ncalrpc:[keysvc]
ncacn_np:\ALICE[\pipe\keysvc]
ncacn_np:\ALICE[\PIPE\SECLOGON]
ncacn_np:\ALICE[\PIPE\wkssvc]
ncalrpc:[AudioSrv]
ncacn_np:\ALICE[\PIPE\atsvc]
ncacn_ip_tcp:10.11.1.5[1025]
ncalrpc:[OLE3]
Protocol: N/A
Provider: schedsvc.dll
UUID : 0A74EF1C-41A4-4E06-83AE-DC74FB1CDD53 v1.0
Bindings:
ncacn_np:\ALICE[\PIPE\atsvc]
ncacn_ip_tcp:10.11.1.5[1025]
ncalrpc:[OLE3]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: taskcomp.dll
UUID : 378E52B0-C0A9-11CF-822D-00AA0051E40F v1.0
Bindings:
ncacn_np:\ALICE[\PIPE\atsvc]
ncacn_ip_tcp:10.11.1.5[1025]
ncalrpc:[OLE3]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: taskcomp.dll
UUID : 1FF70682-0A51-30E8-076D-740BE8CEE98B v1.0
Bindings:
ncacn_np:\ALICE[\PIPE\atsvc]
ncacn_ip_tcp:10.11.1.5[1025]
ncalrpc:[OLE3]
139
Microsoft Windows netbios-ssn
1025
Microsoft Windows RPC