Enumeration 1 export target=10.129.50.86 Port Scanning 1 rustscan -a $target --ulimit 10000 -g 1 nmap -Pn -sC -sV -n -p135,139,5985,445,47001,49664,49667,49665,49666 -T5 $target -oN nmap_querier SMB SMB is open. Try null session 1 smbclient -N -L //$target/ 1 smbclient -N //$target/Reports There is a file we can access, download it 1 mget * It is a .xlsm file. We need to find a way to open it. ...
Enumeration 1 export target=10.129.228.112 Port Scanning 1 rustscan -a $target --ulimit 10000 -g 1 nmap -Pn -sC -sV -n -p80,135,445,50000 -T5 $target Web Application (80) Just a search bar Typed ‘hey’ and press Search. Then got this weird error (because it is an image) We learn that database is Microsoft SQL Server 2005 - 9.00.4053.00 .NET version 2.0.50727.4223 dirsearch nothing showed up 1 2 3 4 5 6 7 # Dirsearch started Thu Aug 13 02:20:04 2026 as: /usr/lib/python3/dist-packages/dirsearch/dirsearch.py -u http://10.129.228.112/ --exclude-sizes 0B 403 312B http://10.129.228.112/%2e%2e//google.com 403 312B http://10.129.228.112/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd 403 312B http://10.129.228.112/\..\..\..\..\..\..\..\..\..\etc\passwd 403 312B http://10.129.228.112/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd 200 50B http://10.129.228.112/error.html Jetty (50000) ...