Windows boxes
17 boxesEnumeration across 21/ftp, 80/http, 135/msrpc, 139/netbios-ssn, 445/microsoft-ds?. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 21/ftp, 242/http, 3145/zftp-admin, 3389/ms-wbt-server. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 80/http. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 22/ssh, 135/msrpc, 139/netbios-ssn, 445/microsoft-ds?, 8080/http-proxy. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 25/smtp, 79/finger, 105/ph-addressbook, 106/pop3pw, 110/pop3. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 53/domain, 80/http, 88/kerberos-sec, 135/msrpc, 139/netbios-ssn. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 53/domain, 135/msrpc, 139/netbios-ssn, 445/microsoft-ds, 3389/ms-wbt-server. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 80/http, 135/msrpc, 139/netbios-ssn, 445/microsoft-ds?, 8082/http. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 80/http, 135/msrpc, 139/netbios-ssn, 445/microsoft-ds, 3389/ms-wbt-server. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 135/msrpc, 139/netbios-ssn, 445/microsoft-ds?, 5040/unknown, 8000/http-alt. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 1978/remotemouse, 1980/pearldoc-xact?, 7680/pando-pub?. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 80/http, 135/msrpc, 139/netbios-ssn, 443/ssl/http, 445/microsoft-ds?. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 21/ftp, 22/ssh, 80/tcpwrapped, 139/netbios-ssn, 445/microsoft-ds?. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 53/domain, 88/kerberos-sec, 135/msrpc, 139/netbios-ssn, 389/ldap. Foothold to root using evil-winrm, impacket, secretsdump.
Enumeration across 21/ftp, 80/http, 135/msrpc, 139/netbios-ssn, 443/ssl/http. Exploits CVE-2015-4133. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 21/ftp, 135/msrpc, 139/netbios-ssn, 445/microsoft-ds?, 4443/http. Foothold to root using evil-winrm, kerberoasting, winpeas.
Enumeration across 135/msrpc, 139/netbios-ssn, 445/microsoft-ds?, 49666/msrpc, 49667/msrpc. Foothold to root using evil-winrm, kerberoasting, winpeas.