Web
Nmap discovered a web server running on the target port 80
Sending a GET request to
fabricorp.local
gets re-directed to fuse.fabricorp.local
Webroot
It’s PaperCut
papercut is a print management software
Logs
I see that there are 3 logs available 29 May 2020, 30 May 2020 and 10 Jun 2020
29 May 2020
There are usernames and computer accounts as well as the printer.
The document also mentions a new starter
printer:
HP-MFT01
machine accounts:JUMP01
LONWK015
users:pmerton
tlavel
bnielson
; (the new starter) I will append those to theusers
file
30 May 2020
Same here.
Printer:
HP-MFT01
Machine Accounts:LONWK019
Users:sthompson
They are appended to the users
file
10 Jun 2020
same.
printer:
HP-MFT01
machine accounts:LAPTOP07
FUSE
users:bhult
administrator
They are appended to theusers
file
That’s about it for the web server. I don’t see anything else. Continuing here