Loot

hydra cracked these from the guest contact list.

[80][http-post-form] host: 10.200.70.232   login: PeanutbutterM    password: Summer2020
[VERBOSE] Page redirected to http://10.200.70.232/src/webmail.php
[80][http-post-form] host: 10.200.70.232   login: DaviesJ    password: Management2018
[VERBOSE] Page redirected to http://10.200.70.232/src/webmail.php
[80][http-post-form] host: 10.200.70.232   login: GongoH    password: Summer2020
[VERBOSE] Page redirected to http://10.200.70.232/src/webmail.php
[VERBOSE] Page redirected to http://10.200.70.232/src/webmail.php
[80][http-post-form] host: 10.200.70.232   login: JeffersD    password: Summer2020
[80][http-post-form] host: 10.200.70.232   login: MurphyF    password: Summer2020

responder hashes

[SMB] NTLMv2-SSP Client   : ::ffff:10.200.70.219
[SMB] NTLMv2-SSP Username : THROWBACK\PetersJ
[SMB] NTLMv2-SSP Hash     : PetersJ::THROWBACK:7a2ed99ae94b628d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