Hackthebox - Sauna
Last updated
Last updated
Windows
┌──(kali㉿kali)-[~]
└─$ sudo nmap -T4 -sC -sV -O -Pn -p- 10.10.10.175
[sudo] password for kali:
Starting Nmap 7.92 ( https://nmap.org ) at 2022-10-19 16:04 EDT
Nmap scan report for 10.10.10.175
Host is up (0.026s latency).
Not shown: 65515 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
53/tcp open domain Simple DNS Plus
80/tcp open http Microsoft IIS httpd 10.0
|_http-title: Egotistical Bank :: Home
| http-methods:
|_ Potentially risky methods: TRACE
|_http-server-header: Microsoft-IIS/10.0
88/tcp open kerberos-sec Microsoft Windows Kerberos (server time: 2022-10-20 03:06:07Z)
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn Microsoft Windows netbios-ssn
389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: EGOTISTICAL-BANK.LOCAL0., Site: Default-First-Site-Name)
445/tcp open microsoft-ds?
464/tcp open kpasswd5?
593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
636/tcp open tcpwrapped
3268/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: EGOTISTICAL-BANK.LOCAL0., Site: Default-First-Site-Name)
3269/tcp open tcpwrapped
5985/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-title: Not Found
|_http-server-header: Microsoft-HTTPAPI/2.0
9389/tcp open mc-nmf .NET Message Framing
49667/tcp open msrpc Microsoft Windows RPC
49673/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
49674/tcp open msrpc Microsoft Windows RPC
49677/tcp open msrpc Microsoft Windows RPC
49689/tcp open msrpc Microsoft Windows RPC
49696/tcp open msrpc Microsoft Windows RPC
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Host: SAUNA; OS: Windows; CPE: cpe:/o:microsoft:windows
Host script results:
|_clock-skew: 7h00m01s
| smb2-time:
| date: 2022-10-20T03:07:02
|_ start_date: N/A
| smb2-security-mode:
| 3.1.1:
|_ Message signing enabled and required
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 199.81 secondsFirst thing is having a look at port 80. We find this
└─$ gobuster dir -u http://10.10.10.175/ -w /media/sf_kali-shared/SecLists/Discovery/Web-Content/directory-list-2.3-big.txt
===============================================================
Gobuster v3.1.0
by OJ Reeves (@TheColonial) & Christian Mehlmauer (@firefart)
===============================================================
[+] Url: http://10.10.10.175/
[+] Method: GET
[+] Threads: 10
[+] Wordlist: /media/sf_kali-shared/SecLists/Discovery/Web-Content/directory-list-2.3-big.txt
[+] Negative Status codes: 404
[+] User Agent: gobuster/3.1.0
[+] Timeout: 10s
===============================================================
2022/10/19 16:15:51 Starting gobuster in directory enumeration mode
===============================================================
/images (Status: 301) [Size: 150] [--> http://10.10.10.175/images/]
/Images (Status: 301) [Size: 150] [--> http://10.10.10.175/Images/]
/css (Status: 301) [Size: 147] [--> http://10.10.10.175/css/]
/fonts (Status: 301) [Size: 149] [--> http://10.10.10.175/fonts/]
/IMAGES (Status: 301) [Size: 150] [--> http://10.10.10.175/IMAGES/]
/Fonts (Status: 301) [Size: 149] [--> http://10.10.10.175/Fonts/]
/CSS (Status: 301) [Size: 147] [--> http://10.10.10.175/CSS/]
[STRIPPED]Looking a little at the website we get a username
We also have a page with the team so these are other usernames to keep aside for later
Let's try to enumerate subdomain
First we need to modify /etc/hosts and add this in the end 10.10.10.175 egotistical-bank.htb
gobuster dns -d egotistical-bank.htb -w /usr/share/wordlists/SecLists/Discovery/Web-Content/big.txt
=> This does not give us anything
gobuster dir -u http://10.10.10.175:5985/ -w /media/sf_kali-shared/SecLists/Discovery/Web-Content/directory-list-2.3-big.txt
python3 /opt/impacket/examples/rpcdump.py 10.10.10.175
Impacket v0.9.23.dev1+20210528.195232.25c62f65 - Copyright 2020 SecureAuth Corporation
[*] Retrieving endpoint list from 10.10.10.175
Protocol: [MS-RSP]: Remote Shutdown Protocol
Provider: wininit.exe
UUID : D95AFE70-A6D5-4259-822E-2C84DA1DDB0D v1.0
Bindings:
ncacn_ip_tcp:10.10.10.175[49664]
ncalrpc:[WindowsShutdown]
ncacn_np:\\SAUNA[\PIPE\InitShutdown]
ncalrpc:[WMsgKRpc080E20]
Protocol: N/A
Provider: winlogon.exe
UUID : 76F226C3-EC14-4325-8A99-6A46348418AF v1.0
Bindings:
ncalrpc:[WindowsShutdown]
ncacn_np:\\SAUNA[\PIPE\InitShutdown]
ncalrpc:[WMsgKRpc080E20]
ncalrpc:[WMsgKRpc081E21]
Protocol: N/A
Provider: N/A
UUID : D09BDEB5-6171-4A34-BFE2-06FA82652568 v1.0
Bindings:
ncalrpc:[csebpub]
ncalrpc:[LRPC-45c0ba6cdd16e4fdad]
ncalrpc:[LRPC-5856966c328ab18b8f]
ncalrpc:[LRPC-699ba8a68cda4b1054]
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
ncalrpc:[LRPC-5856966c328ab18b8f]
ncalrpc:[LRPC-699ba8a68cda4b1054]
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
ncalrpc:[LRPC-699ba8a68cda4b1054]
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
ncalrpc:[LRPC-43e6083533734a720e]
ncalrpc:[LRPC-5a885e659258fb8e66]
Protocol: N/A
Provider: N/A
UUID : 697DCDA9-3BA9-4EB2-9247-E11F1901B0D2 v1.0
Bindings:
ncalrpc:[LRPC-45c0ba6cdd16e4fdad]
ncalrpc:[LRPC-5856966c328ab18b8f]
ncalrpc:[LRPC-699ba8a68cda4b1054]
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 9B008953-F195-4BF9-BDE0-4471971E58ED v1.0
Bindings:
ncalrpc:[LRPC-5856966c328ab18b8f]
ncalrpc:[LRPC-699ba8a68cda4b1054]
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : DD59071B-3215-4C59-8481-972EDADC0F6A v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0D47017B-B33B-46AD-9E18-FE96456C5078 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 95406F0B-B239-4318-91BB-CEA3A46FF0DC v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 4ED8ABCC-F1E2-438B-981F-BB0E8ABC010C v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0FF1F646-13BB-400A-AB50-9A78F2B7A85A v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 6982A06E-5FE2-46B1-B39C-A2C545BFA069 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 082A3471-31B6-422A-B931-A54401960C62 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : FAE436B0-B864-4A87-9EDA-298547CD82F2 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : E53D94CA-7464-4839-B044-09A2FB8B3AE5 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 178D84BE-9291-4994-82C6-3F909ACA5A03 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 4DACE966-A243-4450-AE3F-9B7BCB5315B8 v2.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 1832BCF6-CAB8-41D4-85D2-C9410764F75A v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : C521FACF-09A9-42C5-B155-72388595CBF0 v0.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 2C7FD9CE-E706-4B40-B412-953107EF9BB0 v0.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 88ABCBC3-34EA-76AE-8215-767520655A23 v0.0
Bindings:
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 76C217BC-C8B4-4201-A745-373AD9032B1A v1.0
Bindings:
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 55E6B932-1979-45D6-90C5-7F6270724112 v1.0
Bindings:
ncalrpc:[LRPC-825daa4f6bac7709f2]
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 857FB1BE-084F-4FB5-B59C-4B2C4BE5F0CF v1.0
Bindings:
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : B8CADBAF-E84B-46B9-84F2-6F71C03F9E55 v1.0
Bindings:
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 20C40295-8DBA-48E6-AEBF-3E78EF3BB144 v1.0
Bindings:
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 2513BCBE-6CD4-4348-855E-7EFB3C336DD3 v1.0
Bindings:
ncalrpc:[LRPC-b4a1530001774e49c3]
ncalrpc:[OLE81DA1B2A26A155F6311828501A23]
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0D3E2735-CEA0-4ECC-A9E2-41A2D81AED4E v1.0
Bindings:
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : C605F9FB-F0A3-4E2A-A073-73560F8D9E3E v1.0
Bindings:
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 1B37CA91-76B1-4F5E-A3C7-2ABFC61F2BB0 v1.0
Bindings:
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 8BFC3BE1-6DEF-4E2D-AF74-7C47CD0ADE4A v1.0
Bindings:
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 2D98A740-581D-41B9-AA0D-A88B9D5CE938 v1.0
Bindings:
ncalrpc:[LRPC-c9a0ab0eee4f140e2d]
ncalrpc:[actkernel]
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 0361AE94-0316-4C6C-8AD8-C594375800E2 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 5824833B-3C1A-4AD2-BDFD-C31D19E23ED2 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : BDAA0970-413B-4A3E-9E5D-F6DC9D7E0760 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 3B338D89-6CFA-44B8-847E-531531BC9992 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 8782D3B9-EBBD-4644-A3D8-E8725381919B v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 085B0334-E454-4D91-9B8C-4134F9E793F3 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: N/A
UUID : 4BEC6BB8-B5C2-4B6F-B2C1-5DA5CF92D0D9 v1.0
Bindings:
ncalrpc:[umpo]
Protocol: N/A
Provider: sysntfy.dll
UUID : C9AC6DB5-82B7-4E55-AE8A-E464ED7B4277 v1.0 Impl friendly name
Bindings:
ncalrpc:[LRPC-43eab0d044c9f922b8]
ncalrpc:[LRPC-c97ac6c4d02dc45cd4]
ncalrpc:[IUserProfile2]
ncalrpc:[LRPC-d8a40d680d3aa121ef]
ncalrpc:[senssvc]
ncalrpc:[OLE2C7392E978C63F425F1377AF8C3F]
ncacn_ip_tcp:10.10.10.175[49667]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\SAUNA[\pipe\lsass]
Protocol: N/A
Provider: nsisvc.dll
UUID : 7EA70BCF-48AF-4F6A-8968-6A440754D5FA v1.0 NSI server endpoint
Bindings:
ncalrpc:[LRPC-cefd3094369d8c305f]
Protocol: N/A
Provider: N/A
UUID : E40F7B57-7A25-4CD3-A135-7F7D3DF9D16B v1.0 Network Connection Broker server endpoint
Bindings:
ncalrpc:[LRPC-95a93978a4cbc98203]
ncalrpc:[OLEBB7D123FBD52B87F50658FA853BE]
ncalrpc:[LRPC-72495eb9acb6c05685]
ncalrpc:[LRPC-43e6083533734a720e]
Protocol: N/A
Provider: N/A
UUID : 880FD55E-43B9-11E0-B1A8-CF4EDFD72085 v1.0 KAPI Service endpoint
Bindings:
ncalrpc:[LRPC-95a93978a4cbc98203]
ncalrpc:[OLEBB7D123FBD52B87F50658FA853BE]
ncalrpc:[LRPC-72495eb9acb6c05685]
ncalrpc:[LRPC-43e6083533734a720e]
Protocol: N/A
Provider: N/A
UUID : 5222821F-D5E2-4885-84F1-5F6185A0EC41 v1.0 Network Connection Broker server endpoint for NCB Reset module
Bindings:
ncalrpc:[LRPC-72495eb9acb6c05685]
ncalrpc:[LRPC-43e6083533734a720e]
Protocol: N/A
Provider: N/A
UUID : A500D4C6-0DD1-4543-BC0C-D5F93486EAF8 v1.0
Bindings:
ncalrpc:[LRPC-3477d227168b9a955a]
ncalrpc:[LRPC-5a885e659258fb8e66]
Protocol: N/A
Provider: dhcpcsvc6.dll
UUID : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D6 v1.0 DHCPv6 Client LRPC Endpoint
Bindings:
ncalrpc:[dhcpcsvc6]
ncalrpc:[dhcpcsvc]
Protocol: N/A
Provider: dhcpcsvc.dll
UUID : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D5 v1.0 DHCP Client LRPC Endpoint
Bindings:
ncalrpc:[dhcpcsvc]
Protocol: [MS-EVEN6]: EventLog Remoting Protocol
Provider: wevtsvc.dll
UUID : F6BEAFF7-1E19-4FBB-9F8F-B89E2018337C v1.0 Event log TCPIP
Bindings:
ncacn_ip_tcp:10.10.10.175[49665]
ncacn_np:\\SAUNA[\pipe\eventlog]
ncalrpc:[eventlog]
Protocol: N/A
Provider: gpsvc.dll
UUID : 2EB08E3E-639F-4FBA-97B1-14F878961076 v1.0 Group Policy RPC Interface
Bindings:
ncalrpc:[LRPC-e285d72b5d0bb976f8]
Protocol: N/A
Provider: N/A
UUID : 3A9EF155-691D-4449-8D05-09AD57031823 v1.0
Bindings:
ncacn_ip_tcp:10.10.10.175[49666]
ncalrpc:[LRPC-82b613a549477dcc80]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\SAUNA[\PIPE\atsvc]
ncalrpc:[LRPC-af25f65cb92f765d39]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: schedsvc.dll
UUID : 86D35949-83C9-4044-B424-DB363231FD0C v1.0
Bindings:
ncacn_ip_tcp:10.10.10.175[49666]
ncalrpc:[LRPC-82b613a549477dcc80]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\SAUNA[\PIPE\atsvc]
ncalrpc:[LRPC-af25f65cb92f765d39]
Protocol: N/A
Provider: N/A
UUID : 33D84484-3626-47EE-8C6F-E7E98B113BE1 v2.0
Bindings:
ncalrpc:[LRPC-82b613a549477dcc80]
ncalrpc:[ubpmtaskhostchannel]
ncacn_np:\\SAUNA[\PIPE\atsvc]
ncalrpc:[LRPC-af25f65cb92f765d39]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: taskcomp.dll
UUID : 378E52B0-C0A9-11CF-822D-00AA0051E40F v1.0
Bindings:
ncacn_np:\\SAUNA[\PIPE\atsvc]
ncalrpc:[LRPC-af25f65cb92f765d39]
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol
Provider: taskcomp.dll
UUID : 1FF70682-0A51-30E8-076D-740BE8CEE98B v1.0
Bindings:
ncacn_np:\\SAUNA[\PIPE\atsvc]
ncalrpc:[LRPC-af25f65cb92f765d39]
Protocol: N/A
Provider: schedsvc.dll
UUID : 0A74EF1C-41A4-4E06-83AE-DC74FB1CDD53 v1.0
Bindings:
ncalrpc:[LRPC-af25f65cb92f765d39]
Protocol: N/A
Provider: MPSSVC.dll
UUID : 2FB92682-6599-42DC-AE13-BD2CA89BD11C v1.0 Fw APIs
Bindings:
ncalrpc:[LRPC-8be3152fcf9a40a910]
ncalrpc:[LRPC-32c983c7e2cd5545a4]
ncalrpc:[LRPC-6dd3eeedf5b95fe459]
ncalrpc:[LRPC-5c6e27fbff3afecefc]
Protocol: N/A
Provider: N/A
UUID : F47433C3-3E9D-4157-AAD4-83AA1F5C2D4C v1.0 Fw APIs
Bindings:
ncalrpc:[LRPC-32c983c7e2cd5545a4]
ncalrpc:[LRPC-6dd3eeedf5b95fe459]
ncalrpc:[LRPC-5c6e27fbff3afecefc]
Protocol: N/A
Provider: MPSSVC.dll
UUID : 7F9D11BF-7FB9-436B-A812-B2D50C5D4C03 v1.0 Fw APIs
Bindings:
ncalrpc:[LRPC-6dd3eeedf5b95fe459]
ncalrpc:[LRPC-5c6e27fbff3afecefc]
Protocol: N/A
Provider: BFE.DLL
UUID : DD490425-5325-4565-B774-7E27D6C09C24 v1.0 Base Firewall Engine API
Bindings:
ncalrpc:[LRPC-5c6e27fbff3afecefc]
Protocol: [MS-NRPC]: Netlogon Remote Protocol
Provider: netlogon.dll
UUID : 12345678-1234-ABCD-EF00-01234567CFFB v1.0
Bindings:
ncalrpc:[NETLOGON_LRPC]
ncacn_ip_tcp:10.10.10.175[49674]
ncacn_np:\\SAUNA[\pipe\f39b6a9e288bf4b0]
ncacn_http:10.10.10.175[49673]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE2C7392E978C63F425F1377AF8C3F]
ncacn_ip_tcp:10.10.10.175[49667]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\SAUNA[\pipe\lsass]
Protocol: [MS-RAA]: Remote Authorization API Protocol
Provider: N/A
UUID : 0B1C2170-5732-4E0E-8CD3-D9B16F3B84D7 v0.0 RemoteAccessCheck
Bindings:
ncalrpc:[NETLOGON_LRPC]
ncacn_ip_tcp:10.10.10.175[49674]
ncacn_np:\\SAUNA[\pipe\f39b6a9e288bf4b0]
ncacn_http:10.10.10.175[49673]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE2C7392E978C63F425F1377AF8C3F]
ncacn_ip_tcp:10.10.10.175[49667]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\SAUNA[\pipe\lsass]
ncalrpc:[NETLOGON_LRPC]
ncacn_ip_tcp:10.10.10.175[49674]
ncacn_np:\\SAUNA[\pipe\f39b6a9e288bf4b0]
ncacn_http:10.10.10.175[49673]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE2C7392E978C63F425F1377AF8C3F]
ncacn_ip_tcp:10.10.10.175[49667]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\SAUNA[\pipe\lsass]
Protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
Provider: samsrv.dll
UUID : 12345778-1234-ABCD-EF00-0123456789AC v1.0
Bindings:
ncacn_ip_tcp:10.10.10.175[49674]
ncacn_np:\\SAUNA[\pipe\f39b6a9e288bf4b0]
ncacn_http:10.10.10.175[49673]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE2C7392E978C63F425F1377AF8C3F]
ncacn_ip_tcp:10.10.10.175[49667]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\SAUNA[\pipe\lsass]
Protocol: [MS-LSAT]: Local Security Authority (Translation Methods) Remote
Provider: lsasrv.dll
UUID : 12345778-1234-ABCD-EF00-0123456789AB v0.0
Bindings:
ncacn_np:\\SAUNA[\pipe\f39b6a9e288bf4b0]
ncacn_http:10.10.10.175[49673]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE2C7392E978C63F425F1377AF8C3F]
ncacn_ip_tcp:10.10.10.175[49667]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\SAUNA[\pipe\lsass]
Protocol: [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol
Provider: ntdsai.dll
UUID : E3514235-4B06-11D1-AB04-00C04FC2DCD2 v4.0 MS NT Directory DRS Interface
Bindings:
ncacn_np:\\SAUNA[\pipe\f39b6a9e288bf4b0]
ncacn_http:10.10.10.175[49673]
ncalrpc:[NTDS_LPC]
ncalrpc:[OLE2C7392E978C63F425F1377AF8C3F]
ncacn_ip_tcp:10.10.10.175[49667]
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End Point]
ncalrpc:[protected_storage]
ncalrpc:[lsasspirpc]
ncalrpc:[lsapolicylookup]
ncalrpc:[LSA_EAS_ENDPOINT]
ncalrpc:[lsacap]
ncalrpc:[LSARPC_ENDPOINT]
ncalrpc:[securityevent]
ncalrpc:[audit]
ncacn_np:\\SAUNA[\pipe\lsass]
Protocol: N/A
Provider: N/A
UUID : 51A227AE-825B-41F2-B4A9-1AC9557A1018 v1.0 Ngc Pop Key Service
Bindings:
ncalrpc:[samss lpc]
ncalrpc:[SidKey Local End