Miscellaneous

This section includes the important keys/notes required for quick access. Only for reference. Credentials included in this document do not work anymore.

Elasticsearch - Security autoconfiguration information

--------------------------- Security autoconfiguration information ------------------------------

Authentication and authorization are enabled.
TLS for the transport and HTTP layers is enabled and configured.

The generated password for the elastic built-in superuser is : K7O+gYUZt_Zj=YdV6-8e

If this node should join an existing cluster, you can reconfigure this with
'/usr/share/elasticsearch/bin/elasticsearch-reconfigure-node --enrollment-token <token-here>'
after creating an enrollment token on your existing cluster.

You can complete the following actions at any time:

Reset the password of the elastic built-in superuser with
'/usr/share/elasticsearch/bin/elasticsearch-reset-password -u elastic'.

Generate an enrollment token for Kibana instances with
 '/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana'.

Generate an enrollment token for Elasticsearch nodes with
'/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s node'.

-------------------------------------------------------------------------------------------------
### NOT starting on installation, please execute the following statements to configure elasticsearch service to start automatically using systemd
 sudo systemctl daemon-reload
 sudo systemctl enable elasticsearch.service
### You can start elasticsearch service by executing
 sudo systemctl start elasticsearch.service

Elasticsearch Enrollment Token

eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTcyLjMxLjAuMjo5MjAwIl0sImZnciI6IjUxYjA5MDJkNzU3Njc0YjNjNTA0OGY2NWRlYWRmYTExODlkZmE4NTAxMDFlZDM2OTQ2ZDY983eBkODMzYTA3YjgiLCJrZXkiOiJpcGpzS0pJQlVtQnczUXd4ZDlhZzo1S2k3WHJsbVJWaUxmZEF5MTZLcGVnIn0=

Kibana Encryption Keys

Settings:
xpack.encryptedSavedObjects.encryptionKey: e5e27709b54jgh82b2d1b38d6c0ac3510
xpack.reporting.encryptionKey: 000fb859ebe6a881bddkdja0051a5ae8
xpack.security.encryptionKey: 5b66fde059ec190a0738b476e5b8ij03

windows-server VM creds

usr: sampleuser
pass: #dkjfgf87S~jomo=

osticket-server VM creds

usr: sampleuser
pass: N9cVH:jdkh675}2

Mythic creds

MYTHIC_ADMIN_PASSWORD="KIL4Ddq6SKPrOgXkdj7[;ZUvcuRuPc"
MYTHIC_ADMIN_USER="mythic_admin"

Payload URL

https://38.67.142.227:7443/direct/download/12f214bc-931e-4775-a315-5duj6719fec1

osTicket links

Your osTicket URL: http://36.233.56.15/osticket/upload/	Your Staff Control Panel: http://36.233.56.15/osticket/upload/scp
osTicket Forums: https://forum.osticket.com/	osTicket Documentation: https://docs.osticket.com/

osTicket ELK API

2CAB8C988388E9B29CDKJ98D44467102