SneakyMailer_Lateral_Movement_developer

developer

---

Although access to the target system was initially denied for SSH connection, the developer user is a valid system user

www-data@sneakymailer:~$ su developer
su developer
password: m^AsY7vTKVT+dV1{WOU%@NaHkUAId3]C
 
developer@sneakymailer:/var/www$ whoami
whoami
developer
developer@sneakymailer:/var/www$ hostname
hostname
sneakymailer
developer@sneakymailer:/var/www$ ifconfig
ifconfig
ens160: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.10.10.197  netmask 255.255.255.0  broadcast 10.10.10.255
        inet6 fe80::250:56ff:feb9:f04c  prefixlen 64  scopeid 0x20<link>
        inet6 dead:beef::250:56ff:feb9:f04c  prefixlen 64  scopeid 0x0<global>
        ether 00:50:56:b9:f0:4c  txqueuelen 1000  (Ethernet)
        RX packets 3057181  bytes 586344584 (559.1 MiB)
        RX errors 0  dropped 29  overruns 0  frame 0
        TX packets 3045259  bytes 1123478131 (1.0 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 224947  bytes 25298975 (24.1 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 224947  bytes 25298975 (24.1 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Lateral Movement made to the developer user