[Sammy20]

I am here to help. So you can post your question

[p0z0x]

Tried using Metasploit on the Opensmtp server. Does anyone know if this is the right server to exploit?

[airspitter]

Use the perl script, you will need to modify it to get RCE.

[xxxyz]

How can i find the internal IP ? I have tried a lot of things but nothing work so far.

[p0z0x]

I'm struggling to get the reverse shell to create a session on my attack machine. Have RCE, but cannot seem to bypass the chain

[Ro0ted]

Use should use proxychains to run the exploit and get reverse shell but you have to try few languages

[starkiller_1]

Hello everyone.

I got a hash from kerber, but it's a rabbit hole. Got 7 ports with Wfuzz, got 1 subdomain with Gig, and found an authentication form from Squid pxoxy. How can I get a password or internal IP?

[BBO]

I can see the internal subdomains however not able to find more details on this, pls gimme some nudge...

[p0z0x]

Finally got user. That was a whirlwind tour

[uschibhuels]

Finally got user. That was a whirlwind tour

Great! Can you give us a hint?

[NoXuSeR]

any nudge on accessing another ip's via proxychains? and smuggling?

[p0z0x]

Finally got user. That was a whirlwind tour

Great! Can you give us a hint?

Once you get a shell on the smtp box, think about kerberos