Checking mail of the marcot user after performing a manual system enumeration
marcot@onlyrands:~$ mail
Mail version 8.1.2 01/15/2001. Type ? for help.
"/var/mail/marcot": 5 messages 5 new
>N 1 matthewa@onlyrand Fri Jun 7 09:33 25/829 Goodbye, best friend
N 2 matthewa@onlyrand Fri Jun 7 09:33 30/1146 Goodbye!
N 3 marcot@onlyrands. Fri Jun 7 09:33 23/825 Welcome, new freelancer!
N 4 edgarm@onlyrands. Fri Jun 7 09:33 22/714 Congratulations
N 5 sonjas@onlyrands. Fri Jun 7 09:33 22/682 FIX YOUR NUMBERSThe user has 5 mails
1
Message 1:
From matthewa@onlyrands.com Fri Jun 7 09:33:48 2024
X-Original-To: marcot@onlyrands.com
From: matthewa@onlyrands.com
To: marcot@onlyrands.com
Subject: Goodbye, best friend
Date: Fri, 18 Feb 2022 08:43:11 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Marco,
Dach, the imbecile, forgot to disable my access, so you can login using my account. The password is "IdealismEngineAshen476" (without the quotation marcot).
I've left you a parting gift--your eyes only.
I'm gonna miss you, pal. Catch you on the flip side.
Sincerely,
Matthew A.The first mail comes from the matthewa user regarding the user’s credential; IdealismEngineAshen476
The credential of the matthewa user will be validated against the target SSH server
2
Message 2:
From matthewa@onlyrands.com Fri Jun 7 09:33:48 2024
X-Original-To: marcot@onlyrands.com
From: matthewa@onlyrands.com
To: kathleenw@onlyrands.com, marcot@onlyrands.com,
matthewa@onlyrands.com, patriciam@onlyrands.com
Subject: Goodbye!
Cc: bobbyp@onlyrands.com, danab@onlyrands.com, susanw@onlyrands.com
Date: Fri, 18 Feb 2022 08:50:03 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Dear randos,
Like most things in life, good things must come to an end. My access has been terminated, so I thought I'd send you this very last email to say goodbye.
You have been like a family to me for as long as I can remember, and since our we're not supposed to communicate outside of work, I hope that maybe one day you will remember me.
Marco, I have faith you will become an excellent leader for the team.
Take care, everyone. Goodbye!
Sincerely,
Matthew A.The second mail is a farewell mail from the matthewa user
3
Message 3:
From marcot@onlyrands.com Fri Jun 7 09:33:49 2024
X-Original-To: freelancers
From: marcot@onlyrands.com
To: williamw@onlyrands.com
Subject: Welcome, new freelancer!
Cc: operations@onlyrands.com, freelancers@onlyrands.com
Date: Mon, 21 Feb 2022 09:26:56 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Hi William,
Welcome to the team. I just talked to Sonja about giving you a virtual tour of what we do at OnlyRands, so please be ready to go once Kathleen's given you the orientation session on how to use TeamCity.
Best,
Marco T.The 3rd mail is a welcome mail to the williamw user, who appears to be a newly recruit
4
Message 4:
From edgarm@onlyrands.com Fri Jun 7 09:33:49 2024
X-Original-To: marcot@onlyrands.com
From: edgarm@onlyrands.com
To: marcot@onlyrands.com
Subject: Congratulations
Date: Mon, 21 Feb 2022 11:07:49 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Hi Marco,
Congratulations on your promotion to department chief. I trust you will have William W. under control, as well as your shameful numbers. Get work done.
Regards,
MacejkovicThe 4th mail is from the edgarm user about marcot’s promotion to the department chief
It would appear that the williamw user is under his leadership, shedding some light to the 3rd mail above
5
Message 5:
From sonjas@onlyrands.com Fri Jun 7 09:33:49 2024
X-Original-To: marcot@onlyrands.com
From: sonjas@onlyrands.com
To: marcot@onlyrands.com
Subject: FIX YOUR NUMBERS
Date: Thu, 24 Feb 2022 16:24:51 (UTC)
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Marco,
If you don't get those numbers up by the end of the quarter, you and your team are going to make up for it in unpaid overtime.
Regards,
Stammsonjas warns the marcot user that if performance doesn’t improve by quarter’s end, he and his team will face unpaid overtime as a consequence.