[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

[00:01:45] Beginning lateral movement phase...

[00:01:46] Enumerating connected systems...

[00:01:47] Discovered hosts...

[00:01:48] SMB enumeration started...

[00:01:49] Shares found: ADMIN$, shared_docs

[00:01:50] Uploading netspy.ps1...

[00:01:51] Mounting share to /mnt/tmp...

[00:01:52] Running winPEAS...

[00:01:53] Domain Admin detected...

[00:01:54] Extracting NTDS.dit...

1 0 A B C 9 X Y Z E R T P U 2 3 4 5 6 7 a b c x y z @ # $ % & * + = ! ? 10 11 00 01 H4 3X R0 PD ST K3 L0G ERR 404 1337 ~ ` | \ / [ ] { } 8 9 d e f g h i j k l m n o p q r s t u v w GLH B1Y C0 PH CR SPT N3K