Flight_SMB_svc_apache

svc_apache Session

---

Checking the SMB server with the TGT of the svc_apache account

┌──(kali㉿kali)-[~/archive/htb/labs/flight]
└─$ KRB5CCNAME=svc_apache@g0.flight.htb.ccache crackmapexec smb g0.flight.htb -k --use-kcache --kdcHost g0.flight.htb --shares 
smb         g0.flight.htb   445    g0               [*] windows 10.0 build 17763 x64 (name:G0) (domain:flight.htb) (signing:True) (SMBv1:False)
SMB         g0.flight.htb   445    G0               [+] flight.htb\ from ccache 
SMB         g0.flight.htb   445    G0               [+] Enumerated shares
SMB         g0.flight.htb   445    G0               Share           Permissions     Remark
SMB         g0.flight.htb   445    G0               -----           -----------     ------
SMB         g0.flight.htb   445    G0               ADMIN$                          Remote Admin
SMB         g0.flight.htb   445    G0               C$                              Default share
SMB         g0.flight.htb   445    G0               IPC$            READ            Remote IPC
SMB         g0.flight.htb   445    G0               NETLOGON        READ            Logon server share 
SMB         g0.flight.htb   445    G0               Shared          READ            
SMB         g0.flight.htb   445    G0               SYSVOL          READ            Logon server share 
SMB         g0.flight.htb   445    G0               Users           READ            
SMB         g0.flight.htb   445    G0               Web             READ            

There are 3 none default shares

• Shared
• Users
• Web

\\g0.flight.htb\Shared

---

┌──(kali㉿kali)-[~/archive/htb/labs/flight]
└─$ KRB5CCNAME=svc_apache@g0.flight.htb.ccache impacket-smbclient flight.htb/@g0.flight.htb -no-pass -k -target-ip $IP -dc-ip $IP 
Impacket v0.11.0 - Copyright 2023 Fortra
 
Type help for list of commands
# use Shared
# ls
drw-rw-rw-          0  Fri Oct 28 22:21:28 2022 .
drw-rw-rw-          0  Fri Oct 28 22:21:28 2022 ..

The \\g0.flight.htb\Shared share is empty

\\g0.flight.htb\Users

---

┌──(kali㉿kali)-[~/archive/htb/labs/flight]
└─$ KRB5CCNAME=svc_apache@g0.flight.htb.ccache impacket-smbclient flight.htb/@g0.flight.htb -no-pass -k -target-ip $IP -dc-ip $IP 
Impacket v0.11.0 - Copyright 2023 Fortra
 
Type help for list of commands
# use Users
# tree .
//desktop.ini
/Default/AppData
/Default/Application Data
/Default/Cookies
/Default/Desktop
/Default/Documents
/Default/Downloads
/Default/Favorites
/Default/Links
/Default/Local Settings
/Default/Music
/Default/My Documents
/Default/NetHood
/Default/NTUSER.DAT
/Default/NTUSER.DAT.LOG1
/Default/NTUSER.DAT.LOG2
/Default/NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TM.blf
/Default/NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000001.regtrans-ms
/Default/NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000002.regtrans-ms
/Default/Pictures
/Default/PrintHood
/Default/Recent
/Default/Saved Games
/Default/SendTo
/Default/Start Menu
/Default/Templates
/Default/Videos
/svc_apache/AppData
/svc_apache/Application Data
/svc_apache/Cookies
/svc_apache/Desktop
/svc_apache/Documents
/svc_apache/Downloads
/svc_apache/Favorites
/svc_apache/Links
/svc_apache/Local Settings
/svc_apache/Music
/svc_apache/My Documents
/svc_apache/NetHood
/svc_apache/NTUSER.DAT
/svc_apache/ntuser.dat.LOG1
/svc_apache/ntuser.dat.LOG2
/svc_apache/NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TM.blf
/svc_apache/NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000001.regtrans-ms
/svc_apache/NTUSER.DAT{1c3790b4-b8ad-11e8-aa21-e41d2d101530}.TMContainer00000000000000000002.regtrans-ms
/svc_apache/ntuser.ini
/svc_apache/Pictures
/svc_apache/PrintHood
/svc_apache/Recent
/svc_apache/Saved Games
/svc_apache/SendTo
/svc_apache/Start Menu
/svc_apache/Templates
/svc_apache/Videos
/Default/AppData/Local
/Default/AppData/Roaming
/Default/Documents/My Music
/Default/Documents/My Pictures
/Default/Documents/My Videos
/svc_apache/AppData/Local
/svc_apache/AppData/LocalLow
/svc_apache/AppData/Roaming
/svc_apache/Documents/My Music
/svc_apache/Documents/My Pictures
/svc_apache/Documents/My Videos
/Default/AppData/Local/Application Data
/Default/AppData/Local/History
/Default/AppData/Local/Microsoft
/Default/AppData/Local/Temp
/Default/AppData/Local/Temporary Internet Files
/Default/AppData/Roaming/Microsoft
/svc_apache/AppData/Local/Application Data
/svc_apache/AppData/Local/History
/svc_apache/AppData/Local/Microsoft
/svc_apache/AppData/Local/Temp
/svc_apache/AppData/Local/Temporary Internet Files
/svc_apache/AppData/Roaming/Microsoft
/Default/AppData/Local/Microsoft/InputPersonalization
/Default/AppData/Local/Microsoft/Windows
/Default/AppData/Local/Microsoft/Windows Sidebar
/Default/AppData/Local/Microsoft/WindowsApps
/Default/AppData/Roaming/Microsoft/Internet Explorer
/Default/AppData/Roaming/Microsoft/Windows
/svc_apache/AppData/Local/Microsoft/Credentials
/svc_apache/AppData/Local/Microsoft/InputPersonalization
/svc_apache/AppData/Local/Microsoft/Windows
/svc_apache/AppData/Local/Microsoft/Windows Sidebar
/svc_apache/AppData/Local/Microsoft/WindowsApps
/svc_apache/AppData/Roaming/Microsoft/Credentials
/svc_apache/AppData/Roaming/Microsoft/Internet Explorer
/svc_apache/AppData/Roaming/Microsoft/Windows
/Default/AppData/Local/Microsoft/InputPersonalization/TrainedDataStore
/Default/AppData/Local/Microsoft/Windows/CloudStore
/Default/AppData/Local/Microsoft/Windows/GameExplorer
/Default/AppData/Local/Microsoft/Windows/History
/Default/AppData/Local/Microsoft/Windows/INetCache
/Default/AppData/Local/Microsoft/Windows/INetCookies
/Default/AppData/Local/Microsoft/Windows/Shell
/Default/AppData/Local/Microsoft/Windows/Temporary Internet Files
/Default/AppData/Local/Microsoft/Windows/WinX
/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets
/Default/AppData/Local/Microsoft/Windows Sidebar/settings.ini
/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch
/Default/AppData/Roaming/Microsoft/Windows/CloudStore
/Default/AppData/Roaming/Microsoft/Windows/Network Shortcuts
/Default/AppData/Roaming/Microsoft/Windows/Printer Shortcuts
/Default/AppData/Roaming/Microsoft/Windows/Recent
/Default/AppData/Roaming/Microsoft/Windows/SendTo
/Default/AppData/Roaming/Microsoft/Windows/Start Menu
/Default/AppData/Roaming/Microsoft/Windows/Templates
/svc_apache/AppData/Local/Microsoft/InputPersonalization/TrainedDataStore
/svc_apache/AppData/Local/Microsoft/Windows/CloudStore
/svc_apache/AppData/Local/Microsoft/Windows/GameExplorer
/svc_apache/AppData/Local/Microsoft/Windows/History
/svc_apache/AppData/Local/Microsoft/Windows/INetCache
/svc_apache/AppData/Local/Microsoft/Windows/INetCookies
/svc_apache/AppData/Local/Microsoft/Windows/PowerShell
/svc_apache/AppData/Local/Microsoft/Windows/Shell
/svc_apache/AppData/Local/Microsoft/Windows/Temporary Internet Files
/svc_apache/AppData/Local/Microsoft/Windows/UsrClass.dat
/svc_apache/AppData/Local/Microsoft/Windows/UsrClass.dat.LOG1
/svc_apache/AppData/Local/Microsoft/Windows/UsrClass.dat.LOG2
/svc_apache/AppData/Local/Microsoft/Windows/UsrClass.dat{c3aefaf7-3ab1-11ed-9173-000c29374359}.TM.blf
/svc_apache/AppData/Local/Microsoft/Windows/UsrClass.dat{c3aefaf7-3ab1-11ed-9173-000c29374359}.TMContainer00000000000000000001.regtrans-ms
/svc_apache/AppData/Local/Microsoft/Windows/UsrClass.dat{c3aefaf7-3ab1-11ed-9173-000c29374359}.TMContainer00000000000000000002.regtrans-ms
/svc_apache/AppData/Local/Microsoft/Windows/WinX
/svc_apache/AppData/Local/Microsoft/Windows Sidebar/Gadgets
/svc_apache/AppData/Local/Microsoft/Windows Sidebar/settings.ini
/svc_apache/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch
/svc_apache/AppData/Roaming/Microsoft/Windows/CloudStore
/svc_apache/AppData/Roaming/Microsoft/Windows/Network Shortcuts
/svc_apache/AppData/Roaming/Microsoft/Windows/Printer Shortcuts
/svc_apache/AppData/Roaming/Microsoft/Windows/Recent
/svc_apache/AppData/Roaming/Microsoft/Windows/SendTo
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu
/svc_apache/AppData/Roaming/Microsoft/Windows/Templates
/Default/AppData/Local/Microsoft/Windows/Shell/DefaultLayouts.xml
/Default/AppData/Local/Microsoft/Windows/WinX/Group1
/Default/AppData/Local/Microsoft/Windows/WinX/Group2
/Default/AppData/Local/Microsoft/Windows/WinX/Group3
/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Control Panel.lnk
/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini
/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Server Manager.lnk
/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk
/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk
/Default/AppData/Roaming/Microsoft/Windows/SendTo/Compressed (zipped) Folder.ZFSendToTarget
/Default/AppData/Roaming/Microsoft/Windows/SendTo/Desktop (create shortcut).DeskLink
/Default/AppData/Roaming/Microsoft/Windows/SendTo/Desktop.ini
/Default/AppData/Roaming/Microsoft/Windows/SendTo/Mail Recipient.MAPIMail
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs
/svc_apache/AppData/Local/Microsoft/Windows/PowerShell/ModuleAnalysisCache
/svc_apache/AppData/Local/Microsoft/Windows/PowerShell/StartupProfileData-NonInteractive
/svc_apache/AppData/Local/Microsoft/Windows/Shell/DefaultLayouts.xml
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group1
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group2
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3
/svc_apache/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Control Panel.lnk
/svc_apache/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Server Manager.lnk
/svc_apache/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk
/svc_apache/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/SendTo/Compressed (zipped) Folder.ZFSendToTarget
/svc_apache/AppData/Roaming/Microsoft/Windows/SendTo/Desktop (create shortcut).DeskLink
/svc_apache/AppData/Roaming/Microsoft/Windows/SendTo/Desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Windows/SendTo/Mail Recipient.MAPIMail
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs
/Default/AppData/Local/Microsoft/Windows/WinX/Group1/1 - Desktop.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group1/desktop.ini
/Default/AppData/Local/Microsoft/Windows/WinX/Group2/1 - Run.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group2/2 - Search.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group2/3 - Windows Explorer.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group2/4 - Control Panel.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group2/5 - Task Manager.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group2/desktop.ini
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/01 - Command Prompt.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/01a - Windows PowerShell.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/02 - Command Prompt.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/02a - Windows PowerShell.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/03 - Computer Management.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/04 - Disk Management.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/04-1 - NetworkStatus.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/05 - Device Manager.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/06 - SystemAbout.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/07 - Event Viewer.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/08 - PowerAndSleep.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/09 - Mobility Center.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/10 - AppsAndFeatures.lnk
/Default/AppData/Local/Microsoft/Windows/WinX/Group3/desktop.ini
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Maintenance
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group1/1 - Desktop.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group1/desktop.ini
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group2/1 - Run.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group2/2 - Search.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group2/3 - Windows Explorer.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group2/4 - Control Panel.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group2/5 - Task Manager.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group2/desktop.ini
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/01 - Command Prompt.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/01a - Windows PowerShell.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/02 - Command Prompt.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/02a - Windows PowerShell.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/03 - Computer Management.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/04 - Disk Management.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/04-1 - NetworkStatus.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/05 - Device Manager.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/06 - SystemAbout.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/07 - Event Viewer.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/08 - PowerAndSleep.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/09 - Mobility Center.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/10 - AppsAndFeatures.lnk
/svc_apache/AppData/Local/Microsoft/Windows/WinX/Group3/desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Maintenance
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/desktop.ini
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/Magnify.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/Narrator.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/On-Screen Keyboard.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories/desktop.ini
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories/Notepad.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Maintenance/Desktop.ini
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Administrative Tools.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Command Prompt.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/computer.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Control Panel.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Desktop.ini
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/File Explorer.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Run.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/desktop.ini
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell (x86).lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell ISE (x86).lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell ISE.lnk
/Default/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/Magnify.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/Narrator.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessibility/On-Screen Keyboard.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories/desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Accessories/Notepad.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Maintenance/Desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Administrative Tools.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Command Prompt.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/computer.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Control Panel.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/File Explorer.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/System Tools/Run.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/desktop.ini
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell (x86).lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell ISE (x86).lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell ISE.lnk
/svc_apache/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Windows PowerShell/Windows PowerShell.lnk
Finished - 266 files and folders

the users share appears to be mapped to the c:\Users directory in the target system The home directory of the svc_apache account does not contain anything note-worthy

\\g0.flight.htb\Web

---

┌──(kali㉿kali)-[~/archive/htb/labs/flight]
└─$ KRB5CCNAME=svc_apache@g0.flight.htb.ccache impacket-smbclient flight.htb/@g0.flight.htb -no-pass -k -target-ip $IP -dc-ip $IP    
Impacket v0.11.0 - Copyright 2023 Fortra
 
Type help for list of commands
# use Web
# tree .
/flight.htb/css
/flight.htb/images
/flight.htb/index.html
/flight.htb/js
/school.flight.htb/about.html
/school.flight.htb/blog.html
/school.flight.htb/home.html
/school.flight.htb/images
/school.flight.htb/index.php
/school.flight.htb/lfi.html
/school.flight.htb/styles
/flight.htb/css/layout.css
/flight.htb/css/reset.css
/flight.htb/css/style.css
/flight.htb/images/bg_bot.jpg
/flight.htb/images/bg_box1.jpg
/flight.htb/images/bg_img.jpg
/flight.htb/images/bg_img2.jpg
/flight.htb/images/bg_testimonials.gif
/flight.htb/images/bg_top.jpg
/flight.htb/images/button1_bg.gif
/flight.htb/images/button2_bg.gif
/flight.htb/images/button_top.jpg
/flight.htb/images/button_top_active.jpg
/flight.htb/images/img1.gif
/flight.htb/images/img2.gif
/flight.htb/images/img3.gif
/flight.htb/images/line_top.gif
/flight.htb/images/logo.jpg
/flight.htb/images/marker_1.gif
/flight.htb/images/page2_img1.jpg
/flight.htb/images/page2_img2.jpg
/flight.htb/images/page3_img1.jpg
/flight.htb/images/page3_img2.jpg
/flight.htb/images/page4_img1.jpg
/flight.htb/images/page4_img2.jpg
/flight.htb/js/cufon-replace.js
/flight.htb/js/cufon-yui.js
/flight.htb/js/html5.js
/flight.htb/js/ie6_script_other.js
/flight.htb/js/ie6_warning
/flight.htb/js/jquery-1.4.2.js
/flight.htb/js/Myriad_Pro_400.font.js
/flight.htb/js/Myriad_Pro_italic_400.font.js
/flight.htb/js/Myriad_Pro_italic_600.font.js
/flight.htb/js/PIE.htc
/school.flight.htb/images/background.gif
/school.flight.htb/images/background.jpg
/school.flight.htb/images/bg-content.gif
/school.flight.htb/images/bg-footer.gif
/school.flight.htb/images/bg-header.gif
/school.flight.htb/images/bg-header2.jpg
/school.flight.htb/images/bg-home.gif
/school.flight.htb/images/bg-menu.gif
/school.flight.htb/images/icon-facebook.gif
/school.flight.htb/images/icon-twitter.gif
/school.flight.htb/images/icon-youtube.gif
/school.flight.htb/images/logo.gif
/school.flight.htb/images/model1.jpg
/school.flight.htb/images/model2.jpg
/school.flight.htb/images/model3.jpg
/school.flight.htb/styles/ie6.css
/school.flight.htb/styles/style.css
/flight.htb/js/ie6_warning/ie6nomore-chrome.jpg
/flight.htb/js/ie6_warning/ie6nomore-cornerx.jpg
/flight.htb/js/ie6_warning/ie6nomore-firefox.jpg
/flight.htb/js/ie6_warning/ie6nomore-ie8.jpg
/flight.htb/js/ie6_warning/ie6nomore-opera.jpg
/flight.htb/js/ie6_warning/ie6nomore-safari.jpg
/flight.htb/js/ie6_warning/ie6nomore-warning.jpg
Finished - 72 files and folders

The \\g0.flight.htb\Web share is the web root directory, corresponding to the C:\xampp\htdocs directory in the target system However, the share is read-only