1134519901 | 2024-12-27T04:22:47.660569
80 /
tcp
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Date: Fri, 27 Dec 2024 04:22:47 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjRwRTh6cTFuOWVUeU04OFVNbUJOSXc9PSIsInZhbHVlIjoiRDN0UUowbStnOGhENUdGNUhFVlRZQzdLR3ZFNFhqVTRHZXI4TjdkblFZNSt0TWRHK1FBUHhZVFIxK25HMTJobm5VQlpzT2RybDE5eWdzaG9uRkRaVWQ2MjVWZjlXUWk5Yk5wd09nUW1wbmFPcjRQcWRpUkN4WmQwVUJzZjFmaVUiLCJtYWMiOiJiZWE0NTQxNmM0NzFlMDI2MWZkODAxOTIzZjVmNjAyODMwMzVjOWIxNzA5M2MzODNiYjU2MjM1OGZkY2M0MTNmIiwidGFnIjoiIn0%3D; expires=Fri, 27 Dec 2024 16:22:47 GMT; Max-Age=43200; path=/; samesite=lax
Set-Cookie: pterodactyl_session=eyJpdiI6Ilk2L1FOaTZtMTEzcU9DeFcvMmZrK0E9PSIsInZhbHVlIjoiWkZFQnhJWGZqZVVscmJpdDl0ZFFRd0dHeVJWWC9CZExKRzE0VFM4dEtURTUxREIyMGx0NXBCdjl1Z3A1UnZJUnZHMWszVFRxVU1GOGVqVWkxaDVhU0hDMkZoWnp4NTBJa01PNUMzWXJYUHBaNVpCRXFtM1doeWdYNmtxQU94U3EiLCJtYWMiOiIyNGI0ZGMwYmMxZjc0ZTY5OTJlYjY1MWY3NTg1MWFiM2M4YjQ5OWY1N2VjYjdlZjc3MjQzYjg0M2M4NzNjY2VlIiwidGFnIjoiIn0%3D; expires=Fri, 27 Dec 2024 16:22:47 GMT; Max-Age=43200; path=/; httponly; samesite=lax
642323041 | 2024-11-28T14:07:57.935485
3389 /
tcp
Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00
Remote Desktop Protocol NTLM Info:
OS: Windows 10 (version 1809)/Windows Server 2019 (version 1809)
OS Build: 10.0.17763
Target Name: WIN-LIVFRVQFMKO
NetBIOS Domain Name: WIN-LIVFRVQFMKO
NetBIOS Computer Name: WIN-LIVFRVQFMKO
DNS Domain Name: WIN-LIVFRVQFMKO
FQDN: WIN-LIVFRVQFMKO
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ad:0a:41:e2:43:26:b8:45:09:8a:c5:fd:48:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=WIN-LIVFRVQFMKO
Validity
Not Before: Nov 7 13:52:44 2024 GMT
Not After : May 9 13:52:44 2025 GMT
Subject: CN=WIN-LIVFRVQFMKO
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a7:9d:2c:05:ea:66:83:81:c3:4d:6a:f3:56:48:
bc:a3:42:cc:3d:ae:80:31:66:e1:e4:a7:8f:99:ca:
fa:b3:22:b0:89:dc:71:e5:29:7d:f1:41:63:71:40:
d2:43:43:03:88:13:95:30:4b:a3:b4:c9:e3:88:5d:
32:bb:a6:9d:4b:02:df:8e:46:d7:9f:9a:b6:72:48:
cb:4f:95:fe:15:03:cb:9f:ab:09:6e:66:82:73:cc:
62:ac:5c:4b:75:f6:63:a2:20:4b:26:b8:46:25:55:
78:95:86:fd:c7:9b:85:75:55:6b:e2:d0:3c:8b:15:
5e:f7:dd:3f:33:90:32:8f:05:bc:1b:61:16:3c:df:
7e:db:05:0b:67:c4:44:81:85:02:ec:86:53:66:05:
40:d5:45:96:3a:e4:9f:15:d2:38:0c:54:7f:9e:80:
08:72:9d:12:82:38:27:f2:f4:2a:02:d2:ce:de:57:
45:6b:d6:aa:2c:20:49:e8:d1:9d:be:b4:ae:64:ac:
a3:dc:f9:cf:f0:cd:43:83:92:24:0e:56:42:4d:54:
43:df:ee:c2:1a:6f:a7:82:50:10:e8:d0:ac:1f:31:
e9:a0:08:c4:86:9c:b9:e7:83:0f:19:90:db:ac:d1:
a6:48:a1:46:f9:37:b6:93:0a:25:64:a8:76:0c:92:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
85:60:67:54:da:ab:1a:eb:45:88:c9:77:6b:51:85:24:37:ea:
a4:eb:69:de:c5:86:c5:c7:96:4e:0d:50:f6:b1:22:9f:ec:96:
10:6c:b4:a5:13:7f:92:03:76:bd:98:24:8f:98:83:ec:fb:55:
c9:f3:d0:cc:5e:77:68:a4:35:8d:89:9e:02:32:46:b1:c5:78:
91:7f:06:13:44:78:e9:c1:d1:f2:43:49:48:06:e0:39:1f:f5:
8a:38:1c:a2:65:b6:cb:4f:81:7b:e5:b7:55:81:26:ec:55:b5:
6e:de:ce:d8:52:45:b0:4a:38:f8:b1:10:7b:0a:19:3e:b2:67:
67:32:fe:9b:6d:ef:5a:2e:f2:b8:e7:81:04:15:61:af:b3:0d:
e8:12:0e:37:9c:5c:c7:31:e2:bc:c7:3c:d0:2f:5a:70:04:a9:
f7:85:fa:c2:44:92:42:c0:71:9c:db:1f:d9:16:e8:2f:89:e8:
b4:75:4e:1c:f2:04:3f:97:01:92:8d:ab:6c:37:bd:1c:a9:65:
2c:43:22:96:8b:88:fb:1c:45:d6:bc:52:a4:0d:86:9d:8b:b4:
1a:ad:cf:5b:4a:3c:a1:74:b0:09:4e:be:58:f4:18:dd:8f:e6:
e1:f7:38:6f:84:20:ba:da:81:ba:e4:85:4e:d8:73:cb:30:71:
44:b8:6e:fc