1-Active Recon

CIDR = 10.10.110.0/24

Scanning the Network

Nmap

sudo nmap -sC -sV -oA all -vv -p- 10.10.110.0/24 -Pn

Internal recon

New subnet found

Interface  7
============
Name         : vmxnet3 Ethernet Adapter
Hardware MAC : 00:50:56:b0:5e:af
MTU          : 1500
IPv4 Address : 10.9.20.13
IPv4 Netmask : 255.255.255.0
IPv6 Address : fe80::cef:1ca4:2a8c:44c
IPv6 Netmask : ffff:ffff:ffff:ffff::

Scanning

cme smb 10.9.20.13/24

SMB         10.9.20.11      445    M3SQLW           [*] Windows 10.0 Build 14393 x64 (name:M3SQLW) (domain:m3c.local) (signing:True) (SMBv1:False)
SMB         10.9.20.12      445    M3WEBAW          [*] Windows 10.0 Build 17763 x64 (name:M3WEBAW) (domain:m3c.local) (signing:True) (SMBv1:False)
SMB         10.9.20.10      445    M3DC             [*] Windows 10.0 Build 14393 x64 (name:M3DC) (domain:m3c.local) (signing:True) (SMBv1:False)
SMB         10.9.20.13      445    CYWEBDW          [*] Windows 10.0 Build 17763 x64 (name:CYWEBDW) (domain:cywebdw) (signing:False) (SMBv1:False)
Running CME against 256 targets ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 100% 0:00:00