laokoon

2023-11-24 17:54:35 +01:00
parent adf3a00bd7
commit eaec057bb1
138 changed files with 6861 additions and 0 deletions
--- a/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_architecture.txt
+++ b/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_architecture.txt
@@ -0,0 +1,6 @@
+Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation
+
+[*] Gathering OS architecture for 1 machines
+[*] Socket connect timeout set to 2 secs
+10.129.243.131 is 64-bit
+
--- a/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_nmap.txt
+++ b/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_nmap.txt
@@ -0,0 +1,12 @@
+# Nmap 7.93 scan initiated Sat Oct 28 14:27:53 2023 as: nmap -vv --reason -Pn -T4 -sV -p 135 --script=banner,msrpc-enum,rpc-grind,rpcinfo -oN /home/simon/CTF/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_nmap.txt -oX /home/simon/CTF/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/xml/tcp_135_rpc_nmap.xml 10.129.243.131
+Nmap scan report for megacorp.htb (10.129.243.131)
+Host is up, received user-set (0.62s latency).
+Scanned at 2023-10-28 14:27:56 CEST for 23s
+
+PORT    STATE SERVICE REASON          VERSION
+135/tcp open  msrpc   syn-ack ttl 127 Microsoft Windows RPC
+Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
+
+Read data files from: /usr/bin/../share/nmap
+Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
+# Nmap done at Sat Oct 28 14:28:19 2023 -- 1 IP address (1 host up) scanned in 26.49 seconds
--- a/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_rpcdump.txt
+++ b/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_rpcdump.txt
@@ -0,0 +1,880 @@
+Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation
+
+[*] Retrieving endpoint list from 10.129.243.131
+Protocol: [MS-RSP]: Remote Shutdown Protocol
+Provider: wininit.exe
+UUID    : D95AFE70-A6D5-4259-822E-2C84DA1DDB0D v1.0
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49664]
+          ncalrpc:[WindowsShutdown]
+          ncacn_np:\\DC[\PIPE\InitShutdown]
+          ncalrpc:[WMsgKRpc089280]
+
+Protocol: N/A
+Provider: winlogon.exe
+UUID    : 76F226C3-EC14-4325-8A99-6A46348418AF v1.0
+Bindings:
+          ncalrpc:[WindowsShutdown]
+          ncacn_np:\\DC[\PIPE\InitShutdown]
+          ncalrpc:[WMsgKRpc089280]
+          ncalrpc:[WMsgKRpc08A621]
+
+Protocol: N/A
+Provider: N/A
+UUID    : D09BDEB5-6171-4A34-BFE2-06FA82652568 v1.0
+Bindings:
+          ncalrpc:[csebpub]
+          ncalrpc:[LRPC-6b54d635557b62ca53]
+          ncalrpc:[LRPC-e71821bbfb97e6ac17]
+          ncalrpc:[LRPC-6b4af19739a6d01556]
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+          ncalrpc:[LRPC-e71821bbfb97e6ac17]
+          ncalrpc:[LRPC-6b4af19739a6d01556]
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+          ncalrpc:[LRPC-6b4af19739a6d01556]
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+          ncalrpc:[LRPC-9e83194e1e5674c55f]
+          ncalrpc:[LRPC-a91e72435259adddfa]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 697DCDA9-3BA9-4EB2-9247-E11F1901B0D2 v1.0
+Bindings:
+          ncalrpc:[LRPC-6b54d635557b62ca53]
+          ncalrpc:[LRPC-e71821bbfb97e6ac17]
+          ncalrpc:[LRPC-6b4af19739a6d01556]
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 9B008953-F195-4BF9-BDE0-4471971E58ED v1.0
+Bindings:
+          ncalrpc:[LRPC-e71821bbfb97e6ac17]
+          ncalrpc:[LRPC-6b4af19739a6d01556]
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : DD59071B-3215-4C59-8481-972EDADC0F6A v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 0D47017B-B33B-46AD-9E18-FE96456C5078 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 95406F0B-B239-4318-91BB-CEA3A46FF0DC v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 4ED8ABCC-F1E2-438B-981F-BB0E8ABC010C v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 0FF1F646-13BB-400A-AB50-9A78F2B7A85A v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 6982A06E-5FE2-46B1-B39C-A2C545BFA069 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 082A3471-31B6-422A-B931-A54401960C62 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : FAE436B0-B864-4A87-9EDA-298547CD82F2 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : E53D94CA-7464-4839-B044-09A2FB8B3AE5 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 178D84BE-9291-4994-82C6-3F909ACA5A03 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 4DACE966-A243-4450-AE3F-9B7BCB5315B8 v2.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 1832BCF6-CAB8-41D4-85D2-C9410764F75A v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : C521FACF-09A9-42C5-B155-72388595CBF0 v0.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 2C7FD9CE-E706-4B40-B412-953107EF9BB0 v0.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 88ABCBC3-34EA-76AE-8215-767520655A23 v0.0
+Bindings:
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 76C217BC-C8B4-4201-A745-373AD9032B1A v1.0
+Bindings:
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 55E6B932-1979-45D6-90C5-7F6270724112 v1.0
+Bindings:
+          ncalrpc:[LRPC-baa5dfd3c285fa9f38]
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 857FB1BE-084F-4FB5-B59C-4B2C4BE5F0CF v1.0
+Bindings:
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : B8CADBAF-E84B-46B9-84F2-6F71C03F9E55 v1.0
+Bindings:
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 20C40295-8DBA-48E6-AEBF-3E78EF3BB144 v1.0
+Bindings:
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 2513BCBE-6CD4-4348-855E-7EFB3C336DD3 v1.0
+Bindings:
+          ncalrpc:[LRPC-56be5249e855b3e1a2]
+          ncalrpc:[OLE389FDE0EE0F1B1F4D79C4FE9A2C8]
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 0D3E2735-CEA0-4ECC-A9E2-41A2D81AED4E v1.0
+Bindings:
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : C605F9FB-F0A3-4E2A-A073-73560F8D9E3E v1.0
+Bindings:
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 1B37CA91-76B1-4F5E-A3C7-2ABFC61F2BB0 v1.0
+Bindings:
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 8BFC3BE1-6DEF-4E2D-AF74-7C47CD0ADE4A v1.0
+Bindings:
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 2D98A740-581D-41B9-AA0D-A88B9D5CE938 v1.0
+Bindings:
+          ncalrpc:[LRPC-b02c899b61b7b8f1c9]
+          ncalrpc:[actkernel]
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 0361AE94-0316-4C6C-8AD8-C594375800E2 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 5824833B-3C1A-4AD2-BDFD-C31D19E23ED2 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : BDAA0970-413B-4A3E-9E5D-F6DC9D7E0760 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 3B338D89-6CFA-44B8-847E-531531BC9992 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 8782D3B9-EBBD-4644-A3D8-E8725381919B v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 085B0334-E454-4D91-9B8C-4134F9E793F3 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 4BEC6BB8-B5C2-4B6F-B2C1-5DA5CF92D0D9 v1.0
+Bindings:
+          ncalrpc:[umpo]
+
+Protocol: N/A
+Provider: sysntfy.dll
+UUID    : C9AC6DB5-82B7-4E55-AE8A-E464ED7B4277 v1.0 Impl friendly name
+Bindings:
+          ncalrpc:[LRPC-78c65697da0c3cb9e7]
+          ncalrpc:[LRPC-5d1d91fbc9832f3673]
+          ncalrpc:[IUserProfile2]
+          ncalrpc:[LRPC-7f9f9d7e564fa27a15]
+          ncalrpc:[senssvc]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+          ncalrpc:[LRPC-2d7a6fcd1e6a5d90b0]
+          ncalrpc:[OLE59700168EED37EDF88950A0917DC]
+
+Protocol: N/A
+Provider: nsisvc.dll
+UUID    : 7EA70BCF-48AF-4F6A-8968-6A440754D5FA v1.0 NSI server endpoint
+Bindings:
+          ncalrpc:[LRPC-9ec11ee764d799175d]
+
+Protocol: N/A
+Provider: nrpsrv.dll
+UUID    : 30ADC50C-5CBC-46CE-9A0E-91914789E23C v1.0 NRP server endpoint
+Bindings:
+          ncalrpc:[LRPC-99bbae991f0f6e961a]
+
+Protocol: N/A
+Provider: N/A
+UUID    : E40F7B57-7A25-4CD3-A135-7F7D3DF9D16B v1.0 Network Connection Broker server endpoint
+Bindings:
+          ncalrpc:[LRPC-95313533ddc887d499]
+          ncalrpc:[OLE11E1ADACE4D3F3328245D6CF61B4]
+          ncalrpc:[LRPC-4f7c4b35ddfa33800c]
+          ncalrpc:[LRPC-9e83194e1e5674c55f]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 880FD55E-43B9-11E0-B1A8-CF4EDFD72085 v1.0 KAPI Service endpoint
+Bindings:
+          ncalrpc:[LRPC-95313533ddc887d499]
+          ncalrpc:[OLE11E1ADACE4D3F3328245D6CF61B4]
+          ncalrpc:[LRPC-4f7c4b35ddfa33800c]
+          ncalrpc:[LRPC-9e83194e1e5674c55f]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 5222821F-D5E2-4885-84F1-5F6185A0EC41 v1.0 Network Connection Broker server endpoint for NCB Reset module
+Bindings:
+          ncalrpc:[LRPC-4f7c4b35ddfa33800c]
+          ncalrpc:[LRPC-9e83194e1e5674c55f]
+
+Protocol: N/A
+Provider: N/A
+UUID    : A500D4C6-0DD1-4543-BC0C-D5F93486EAF8 v1.0
+Bindings:
+          ncalrpc:[LRPC-7d4055d4f64c73ef42]
+          ncalrpc:[LRPC-a91e72435259adddfa]
+
+Protocol: N/A
+Provider: dhcpcsvc.dll
+UUID    : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D5 v1.0 DHCP Client LRPC Endpoint
+Bindings:
+          ncalrpc:[dhcpcsvc]
+          ncalrpc:[dhcpcsvc6]
+
+Protocol: N/A
+Provider: dhcpcsvc6.dll
+UUID    : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D6 v1.0 DHCPv6 Client LRPC Endpoint
+Bindings:
+          ncalrpc:[dhcpcsvc6]
+
+Protocol: [MS-EVEN6]: EventLog Remoting Protocol
+Provider: wevtsvc.dll
+UUID    : F6BEAFF7-1E19-4FBB-9F8F-B89E2018337C v1.0 Event log TCPIP
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49665]
+          ncacn_np:\\DC[\pipe\eventlog]
+          ncalrpc:[eventlog]
+
+Protocol: N/A
+Provider: gpsvc.dll
+UUID    : 2EB08E3E-639F-4FBA-97B1-14F878961076 v1.0 Group Policy RPC Interface
+Bindings:
+          ncalrpc:[LRPC-1e815b36ff28d761c1]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 3A9EF155-691D-4449-8D05-09AD57031823 v1.0
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49666]
+          ncalrpc:[LRPC-3e1dbf52587c9cea33]
+          ncalrpc:[ubpmtaskhostchannel]
+          ncacn_np:\\DC[\PIPE\atsvc]
+          ncalrpc:[LRPC-a6fa6dc5bb5e22a3a2]
+
+Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
+Provider: schedsvc.dll
+UUID    : 86D35949-83C9-4044-B424-DB363231FD0C v1.0
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49666]
+          ncalrpc:[LRPC-3e1dbf52587c9cea33]
+          ncalrpc:[ubpmtaskhostchannel]
+          ncacn_np:\\DC[\PIPE\atsvc]
+          ncalrpc:[LRPC-a6fa6dc5bb5e22a3a2]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 33D84484-3626-47EE-8C6F-E7E98B113BE1 v2.0
+Bindings:
+          ncalrpc:[LRPC-3e1dbf52587c9cea33]
+          ncalrpc:[ubpmtaskhostchannel]
+          ncacn_np:\\DC[\PIPE\atsvc]
+          ncalrpc:[LRPC-a6fa6dc5bb5e22a3a2]
+
+Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
+Provider: taskcomp.dll
+UUID    : 378E52B0-C0A9-11CF-822D-00AA0051E40F v1.0
+Bindings:
+          ncacn_np:\\DC[\PIPE\atsvc]
+          ncalrpc:[LRPC-a6fa6dc5bb5e22a3a2]
+
+Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
+Provider: taskcomp.dll
+UUID    : 1FF70682-0A51-30E8-076D-740BE8CEE98B v1.0
+Bindings:
+          ncacn_np:\\DC[\PIPE\atsvc]
+          ncalrpc:[LRPC-a6fa6dc5bb5e22a3a2]
+
+Protocol: N/A
+Provider: schedsvc.dll
+UUID    : 0A74EF1C-41A4-4E06-83AE-DC74FB1CDD53 v1.0
+Bindings:
+          ncalrpc:[LRPC-a6fa6dc5bb5e22a3a2]
+
+Protocol: N/A
+Provider: MPSSVC.dll
+UUID    : 2FB92682-6599-42DC-AE13-BD2CA89BD11C v1.0 Fw APIs
+Bindings:
+          ncalrpc:[LRPC-a3db541015ee3b4092]
+          ncalrpc:[LRPC-25295713f276d13d17]
+          ncalrpc:[LRPC-61500542b0c0f189c2]
+          ncalrpc:[LRPC-3a5ad18195f7896668]
+
+Protocol: N/A
+Provider: N/A
+UUID    : F47433C3-3E9D-4157-AAD4-83AA1F5C2D4C v1.0 Fw APIs
+Bindings:
+          ncalrpc:[LRPC-25295713f276d13d17]
+          ncalrpc:[LRPC-61500542b0c0f189c2]
+          ncalrpc:[LRPC-3a5ad18195f7896668]
+
+Protocol: N/A
+Provider: MPSSVC.dll
+UUID    : 7F9D11BF-7FB9-436B-A812-B2D50C5D4C03 v1.0 Fw APIs
+Bindings:
+          ncalrpc:[LRPC-61500542b0c0f189c2]
+          ncalrpc:[LRPC-3a5ad18195f7896668]
+
+Protocol: N/A
+Provider: BFE.DLL
+UUID    : DD490425-5325-4565-B774-7E27D6C09C24 v1.0 Base Firewall Engine API
+Bindings:
+          ncalrpc:[LRPC-3a5ad18195f7896668]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 7F1343FE-50A9-4927-A778-0C5859517BAC v1.0 DfsDs service
+Bindings:
+          ncacn_np:\\DC[\PIPE\wkssvc]
+          ncalrpc:[LRPC-0a9c64a79e96914cf8]
+
+Protocol: N/A
+Provider: N/A
+UUID    : EB081A0D-10EE-478A-A1DD-50995283E7A8 v3.0 Witness Client Test Interface
+Bindings:
+          ncalrpc:[LRPC-0a9c64a79e96914cf8]
+
+Protocol: N/A
+Provider: N/A
+UUID    : F2C9B409-C1C9-4100-8639-D8AB1486694A v1.0 Witness Client Upcall Server
+Bindings:
+          ncalrpc:[LRPC-0a9c64a79e96914cf8]
+
+Protocol: N/A
+Provider: N/A
+UUID    : C2D1B5DD-FA81-4460-9DD6-E7658B85454B v1.0
+Bindings:
+          ncalrpc:[LRPC-eeed9c661ca2875f9a]
+          ncalrpc:[OLEAC93DB631A747BCA540781AA6BEF]
+
+Protocol: N/A
+Provider: N/A
+UUID    : F44E62AF-DAB1-44C2-8013-049A9DE417D6 v1.0
+Bindings:
+          ncalrpc:[LRPC-eeed9c661ca2875f9a]
+          ncalrpc:[OLEAC93DB631A747BCA540781AA6BEF]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 7AEB6705-3AE6-471A-882D-F39C109EDC12 v1.0
+Bindings:
+          ncalrpc:[LRPC-eeed9c661ca2875f9a]
+          ncalrpc:[OLEAC93DB631A747BCA540781AA6BEF]
+
+Protocol: N/A
+Provider: N/A
+UUID    : E7F76134-9EF5-4949-A2D6-3368CC0988F3 v1.0
+Bindings:
+          ncalrpc:[LRPC-eeed9c661ca2875f9a]
+          ncalrpc:[OLEAC93DB631A747BCA540781AA6BEF]
+
+Protocol: N/A
+Provider: N/A
+UUID    : B37F900A-EAE4-4304-A2AB-12BB668C0188 v1.0
+Bindings:
+          ncalrpc:[LRPC-eeed9c661ca2875f9a]
+          ncalrpc:[OLEAC93DB631A747BCA540781AA6BEF]
+
+Protocol: N/A
+Provider: N/A
+UUID    : ABFB6CA3-0C5E-4734-9285-0AEE72FE8D1C v1.0
+Bindings:
+          ncalrpc:[LRPC-eeed9c661ca2875f9a]
+          ncalrpc:[OLEAC93DB631A747BCA540781AA6BEF]
+
+Protocol: N/A
+Provider: N/A
+UUID    : C49A5A70-8A7F-4E70-BA16-1E8F1F193EF1 v1.0 Adh APIs
+Bindings:
+          ncalrpc:[OLE5FCB0823110EF79154A84BC1C955]
+          ncalrpc:[TeredoControl]
+          ncalrpc:[TeredoDiagnostics]
+          ncalrpc:[LRPC-2b9dd75a050dd32327]
+
+Protocol: N/A
+Provider: N/A
+UUID    : C36BE077-E14B-4FE9-8ABC-E856EF4F048B v1.0 Proxy Manager client server endpoint
+Bindings:
+          ncalrpc:[TeredoControl]
+          ncalrpc:[TeredoDiagnostics]
+          ncalrpc:[LRPC-2b9dd75a050dd32327]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 2E6035B2-E8F1-41A7-A044-656B439C4C34 v1.0 Proxy Manager provider server endpoint
+Bindings:
+          ncalrpc:[TeredoControl]
+          ncalrpc:[TeredoDiagnostics]
+          ncalrpc:[LRPC-2b9dd75a050dd32327]
+
+Protocol: N/A
+Provider: iphlpsvc.dll
+UUID    : 552D076A-CB29-4E44-8B6A-D15E59E2C0AF v1.0 IP Transition Configuration endpoint
+Bindings:
+          ncalrpc:[LRPC-2b9dd75a050dd32327]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 0D3C7F20-1C8D-4654-A1B3-51563B298BDA v1.0 UserMgrCli
+Bindings:
+          ncalrpc:[LRPC-0f23b80e8c8e8083c8]
+          ncalrpc:[OLE6A1CCA02AC4BF8BCCEB70B5744EE]
+
+Protocol: N/A
+Provider: N/A
+UUID    : B18FBAB6-56F8-4702-84E0-41053293A869 v1.0 UserMgrCli
+Bindings:
+          ncalrpc:[LRPC-0f23b80e8c8e8083c8]
+          ncalrpc:[OLE6A1CCA02AC4BF8BCCEB70B5744EE]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 51A227AE-825B-41F2-B4A9-1AC9557A1018 v1.0 Ngc Pop Key Service
+Bindings:
+          ncalrpc:[NETLOGON_LRPC]
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 8FB74744-B2FF-4C00-BE0D-9EF9A191FE1B v1.0 Ngc Pop Key Service
+Bindings:
+          ncalrpc:[NETLOGON_LRPC]
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: N/A
+Provider: N/A
+UUID    : B25A52BF-E5DD-4F4A-AEA6-8CA7272A0E86 v2.0 KeyIso
+Bindings:
+          ncalrpc:[NETLOGON_LRPC]
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: [MS-NRPC]: Netlogon Remote Protocol
+Provider: netlogon.dll
+UUID    : 12345678-1234-ABCD-EF00-01234567CFFB v1.0
+Bindings:
+          ncalrpc:[NETLOGON_LRPC]
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: [MS-RAA]: Remote Authorization API Protocol
+Provider: N/A
+UUID    : 0B1C2170-5732-4E0E-8CD3-D9B16F3B84D7 v0.0 RemoteAccessCheck
+Bindings:
+          ncalrpc:[NETLOGON_LRPC]
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+          ncalrpc:[NETLOGON_LRPC]
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
+Provider: lsasrv.dll
+UUID    : 12345778-1234-ABCD-EF00-0123456789AB v0.0
+Bindings:
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
+Provider: ntdsai.dll
+UUID    : E3514235-4B06-11D1-AB04-00C04FC2DCD2 v4.0 MS NT Directory DRS Interface
+Bindings:
+          ncacn_np:\\DC[\pipe\f646315b4c642943]
+          ncacn_http:10.129.243.131[49674]
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
+Provider: samsrv.dll
+UUID    : 12345778-1234-ABCD-EF00-0123456789AC v1.0
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49673]
+          ncalrpc:[NTDS_LPC]
+          ncalrpc:[OLE30FBECD9DCFCCBF8301B42E8A091]
+          ncacn_ip_tcp:10.129.243.131[49667]
+          ncalrpc:[samss lpc]
+          ncalrpc:[SidKey Local End Point]
+          ncalrpc:[protected_storage]
+          ncalrpc:[lsasspirpc]
+          ncalrpc:[lsapolicylookup]
+          ncalrpc:[LSA_EAS_ENDPOINT]
+          ncalrpc:[lsacap]
+          ncalrpc:[LSARPC_ENDPOINT]
+          ncalrpc:[securityevent]
+          ncalrpc:[audit]
+          ncacn_np:\\DC[\pipe\lsass]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 1A0D010F-1C33-432C-B0F5-8CF4E8053099 v1.0 IdSegSrv service
+Bindings:
+          ncalrpc:[LRPC-f4293e3b5b9ae5cb28]
+
+Protocol: N/A
+Provider: srvsvc.dll
+UUID    : 98716D03-89AC-44C7-BB8C-285824E51C4A v1.0 XactSrv service
+Bindings:
+          ncalrpc:[LRPC-f4293e3b5b9ae5cb28]
+
+Protocol: N/A
+Provider: sysmain.dll
+UUID    : B58AA02E-2884-4E97-8176-4EE06D794184 v1.0
+Bindings:
+          ncalrpc:[LRPC-6ba6be7619ad5499b5]
+
+Protocol: N/A
+Provider: N/A
+UUID    : DF4DF73A-C52D-4E3A-8003-8437FDF8302A v0.0 WM_WindowManagerRPC\Server
+Bindings:
+          ncalrpc:[LRPC-e9c9cb51676dd7958e]
+
+Protocol: N/A
+Provider: IKEEXT.DLL
+UUID    : A398E520-D59A-4BDD-AA7A-3C1E0303A511 v1.0 IKE/Authip API
+Bindings:
+          ncalrpc:[LRPC-a6cbf0f8554ac2dd0e]
+
+Protocol: N/A
+Provider: N/A
+UUID    : 650A7E26-EAB8-5533-CE43-9C1DFCE11511 v1.0 Vpn APIs
+Bindings:
+          ncalrpc:[LRPC-78511121f1275f430c]
+          ncalrpc:[VpnikeRpc]
+          ncalrpc:[RasmanLrpc]
+          ncacn_np:\\DC[\PIPE\ROUTER]
+
+Protocol: [MS-SCMR]: Service Control Manager Remote Protocol
+Provider: services.exe
+UUID    : 367ABB81-9844-35F1-AD32-98F038001003 v2.0
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49678]
+
+Protocol: [MS-CMPO]: MSDTC Connection Manager:
+Provider: msdtcprx.dll
+UUID    : 906B0CE0-C70B-1067-B317-00DD010662DA v1.0
+Bindings:
+          ncalrpc:[LRPC-3bcaafee1590c0de20]
+          ncalrpc:[OLE17B51056E4D45A611212712C1451]
+          ncalrpc:[LRPC-9c5b8ea96b2f264739]
+          ncalrpc:[LRPC-9c5b8ea96b2f264739]
+          ncalrpc:[LRPC-9c5b8ea96b2f264739]
+
+Protocol: N/A
+Provider: N/A
+UUID    : F3F09FFD-FBCF-4291-944D-70AD6E0E73BB v1.0
+Bindings:
+          ncalrpc:[LRPC-802031e034c1f025bd]
+
+Protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management
+Provider: dns.exe
+UUID    : 50ABC2A4-574D-40B3-9D66-EE4FD5FBA076 v5.0
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49695]
+
+Protocol: [MS-FRS2]: Distributed File System Replication Protocol
+Provider: dfsrmig.exe
+UUID    : 897E2E5F-93F3-4376-9C9C-FD2277495C27 v1.0 Frs2 Service
+Bindings:
+          ncacn_ip_tcp:10.129.243.131[49843]
+          ncalrpc:[OLECF74F747061ABA28294F2BDC6FF0]
+
+Protocol: N/A
+Provider: N/A
+UUID    : BF4DC912-E52F-4904-8EBE-9317C1BDD497 v1.0
+Bindings:
+          ncalrpc:[LRPC-92939372b55364a6c8]
+          ncalrpc:[OLE9D9AB6AB4D22AD38C10DD1548060]
+
+[*] Received 405 endpoints.
+
--- a/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/xml/tcp_135_rpc_nmap.xml
+++ b/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/xml/tcp_135_rpc_nmap.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE nmaprun>
+<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?>
+<!-- Nmap 7.93 scan initiated Sat Oct 28 14:27:53 2023 as: nmap -vv -&#45;reason -Pn -T4 -sV -p 135 -&#45;script=banner,msrpc-enum,rpc-grind,rpcinfo -oN /home/simon/CTF/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_nmap.txt -oX /home/simon/CTF/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/xml/tcp_135_rpc_nmap.xml 10.129.243.131 -->
+<nmaprun scanner="nmap" args="nmap -vv -&#45;reason -Pn -T4 -sV -p 135 -&#45;script=banner,msrpc-enum,rpc-grind,rpcinfo -oN /home/simon/CTF/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/tcp_135_rpc_nmap.txt -oX /home/simon/CTF/LaokoonHaxorcist/fullpwn/results/10.129.243.131/scans/tcp135/xml/tcp_135_rpc_nmap.xml 10.129.243.131" start="1698496073" startstr="Sat Oct 28 14:27:53 2023" version="7.93" xmloutputversion="1.05">
+<scaninfo type="syn" protocol="tcp" numservices="1" services="135"/>
+<verbose level="2"/>
+<debugging level="0"/>
+<taskbegin task="NSE" time="1698496076"/>
+<taskend task="NSE" time="1698496076"/>
+<taskbegin task="NSE" time="1698496076"/>
+<taskend task="NSE" time="1698496076"/>
+<taskbegin task="SYN Stealth Scan" time="1698496076"/>
+<taskend task="SYN Stealth Scan" time="1698496078" extrainfo="1 total ports"/>
+<taskbegin task="Service scan" time="1698496078"/>
+<taskend task="Service scan" time="1698496084" extrainfo="1 service on 1 host"/>
+<taskbegin task="NSE" time="1698496084"/>
+<taskend task="NSE" time="1698496099"/>
+<taskbegin task="NSE" time="1698496099"/>
+<taskend task="NSE" time="1698496099"/>
+<host starttime="1698496076" endtime="1698496099"><status state="up" reason="user-set" reason_ttl="0"/>
+<address addr="10.129.243.131" addrtype="ipv4"/>
+<hostnames>
+<hostname name="megacorp.htb" type="PTR"/>
+</hostnames>
+<ports><port protocol="tcp" portid="135"><state state="open" reason="syn-ack" reason_ttl="127"/><service name="msrpc" product="Microsoft Windows RPC" ostype="Windows" method="probed" conf="10"><cpe>cpe:/o:microsoft:windows</cpe></service></port>
+</ports>
+<times srtt="624808" rttvar="624808" to="1250000"/>
+</host>
+<taskbegin task="NSE" time="1698496099"/>
+<taskend task="NSE" time="1698496099"/>
+<taskbegin task="NSE" time="1698496099"/>
+<taskend task="NSE" time="1698496099"/>
+<runstats><finished time="1698496099" timestr="Sat Oct 28 14:28:19 2023" summary="Nmap done at Sat Oct 28 14:28:19 2023; 1 IP address (1 host up) scanned in 26.49 seconds" elapsed="26.49" exit="success"/><hosts up="1" down="0" total="1"/>
+</runstats>
+</nmaprun>