Problems with "Getting starded" Module

Off-topic
21

I’m getting a failed connection (Error NT_STATUS_CONNECTION_REFUSED)

Any one that can point me in the right direction. This is in attempt to get the flag.txt contents after running

smbclient -U bob \\10.129.42.253\users

22

If you still have this problem, downloading a new TCP VPN file and resetting the target helped me.
I spent a good hour figuring it out…

23

Hi all, a quick recap before my question.

I’ve successfully completed this module, however i struggled to gain the password when logging into Bob…

Even thou it was an easy password, i sat for 30mins attempting to try all easy passwords i knew, 1234, admin, root, etc.

After being unsuccesfull i done a quick search and got it.

Question

If i had to gain access to this machine, is there a way i could automate this process of obtaining the password?

Im attempting to do the entire pen test path without any tips, so for furture refence, is there a way i can automate this ? If so will it be covered in more depth in further modules ?

Last question, more of a dummy question, how did we obtain the username bob ? I ran the following commands, smbclient -N -L \\ IP || and smbclient \\ IP \users

however im abit confused on how we obtained the username, or was it just GIVEN ?

24

Hi there,

I were in your shoes until 3 min ago, I do not entierly agree on the simple password, it is the 40399th most used password according to the rockyou list… I couldn’t guess it so I tried hydra to brute force but had issues with support for SMBv1 so I tried Metasploit instead.
Package: auxiliary/scanner/smb/smb_login
PASS_FILE: /usr/share/wordlists/rockyou.txt
RHOSTS:
and other settings

Took about 20 min to brute force but I am quite satisfied with the solution.

Resources I used:

25

Screenshot 2023-10-13 at 3.58.47 PM
Screenshot 2023-10-13 at 3.58.47 PM1640×976 105 KB

I can’t figure it out either. I get to the file after entering bob and welcome1! but I can’t figure out how to open the file to view the contents for the anser

26

How can i get the password of bob? i have no idea!

27

Hey, I also have this question.So, what’s your solution?

28

The flag.txt is already in been downloaded after yoy enter the “get flag.txt” command!