============================================
| 收集 RabbitMQ Erlang Cookie
|       Erlang Cookie: abcdefg12456789abcde
============================================
| 收集 SolarWinds 证书
|       SolarWinds Orion 证书已找到！
|       主题名称: CN=SolarWinds-Orion
|       指纹    : BE85C6C3AACA8840E166187B6AB8C6BA9DA8DE80
|       密码    : alcvabkajp4
|       私钥    : MIIKHwIBAzCCCd8GCSqGSIb3DQEHAaCCCdAEggn<snip>
============================================
| 收集 Default.DAT 文件
|       加密后: 01000000D08C9DDF0115D<snip>
|       解密后: 5D3CE5B08C9201E636BCF<snip>
============================================
| 收集数据库凭据                    |
|       SWNetPerfMon.DB 路径: C:\Program Files (x86)\SolarWinds\Orion\SWNetPerfMon.DB
|       连接字符串: Server=(local)\SOLARWINDS_ORION;Database=SolarWindsOrion;User ID=SolarWindsOrionDatabaseUser;Password=SUPERSECRETPASSWORDHERE
|       找到的数据库凭据数量: 1
============================================
| 连接到数据库                     |
|       成功连接到: Server=(local)\SOLARWINDS_ORION;Database=SolarWindsOrion;User ID=SolarWindsOrionDatabaseUser;MultipleActiveResultSets=true
============================================
| 数据库 - 导出密钥表                 |
|       密钥ID: 1
|       加密密钥: LmjknGhSXTC<snip>
|       类型: Aes256
|       用途: master
|       保护类型: 1
|       保护值: BE85C6C3AACA8<snip>
|       保护详情: {}
------------------------------------------------
|       密钥ID: 2
|       加密密钥: //pj6a4FaCyfv/Rgs<snip>
|       类型: Aes256
|       用途: oldcryptohelper
|       保护类型: 0
|       保护值: 1
|       保护详情: {"IV":"oj3JCT7Cft<snip>"}
============================================
| 数据库 - 导出帐户表                       |
|        帐户: _system
|        密码哈希: qE9ClH<snip>
|        密码盐值: XgtO8XNWc/KiIdglGOnxvw==
|        Hashcat 模式 12501: $solarwinds$1$XgtO8XNWc/KiIdglGOnxvw==$qE9ClHDI<snip>
|        帐户已启用: Y
|        允许管理员: Y
|        最后登录: 12/15/2020
--------------------------------------------
|        帐户: Admin
|        密码哈希: IfAEwA7LXxOAH7ORCG0ZYeq<snip>
|        密码盐值: jNhn3i2XtHfY8y4EOmNdiQ==
|        Hashcat 模式 12501: $solarwinds$1$jNhn3i2XtHfY8y4EOmNdiQ==$IfAEwA7LXxOAH7ORCG0ZY<snip>
|        帐户已启用: Y
|        允许管理员: Y
|        最后登录: 12/02/2020
--------------------------------------------
|        帐户: Guest
|        密码哈希: Y/EMuOWMNfCd<snip>
|        数据库中盐值为 NULL，因此使用小写用户名: guest
|        Hashcat 模式 12500: $solarwinds$0$guest$Y/EMuOWMNfCd<snip>
|        帐户已启用: N
|        允许管理员: N
|        最后登录: 12/30/1899
--------------------------------------------
|        帐户: iprequest
|        密码哈希: 7zskGWFukuHuwQ<snip>
|        数据库中盐值为 NULL，因此使用小写用户名: iprequest
|        Hashcat 模式 12500: $solarwinds$0$iprequest$7zskGWFukuHuwQ<snip>
|        帐户已启用: Y
|        允许管理员: N
|        最后登录: 01/01/1900
--------------------------------------------
|        帐户: SITTINGDUCK\uberolduser
|        密码: 11-417578424799297-9-6260697430795685763067724
|        解码密码: ASDQWE123
|        Hashcat 模式 21500: $solarwinds$0$admin$fF1lrlOXfxVz51Etjcs18XNK+Zt3keV2AllH9cYtGzdt5Yg2TtcsU84G9+5VVFMIUorR5eNJzX/1kmef6wZfrg==
|        帐户已启用: Y
|        允许管理员: N
|        最后登录: 11/15/2015
|        帐户 SID: S-1-5-21-1000000000-2000000000-3000000000-50000
|        组: SITTINGDUCK\Domain Admins
--------------------------------------------
============================================
| 数据库 - 导出凭据表               |
------------------1--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.UsernamePasswordCredential
| 名称: _system
|       描述: Cortex Integration
|       所有者: CORE
|               密码: 9dM-5pH/&amp;Y(KU-v
|               用户名: _system
------------------1--------------------------
------------------2--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.UsernamePasswordCredential
| 名称: JobEngine
|       描述: Job Engine 路由器 TCP 端点凭据
|       所有者: JobEngine
|               密码: +fBByxJFsK+da6ZN2wKvLTKC/PWUzFlfIvvwtW/XqvA=
|               用户名: KWPPhiYJmE8+fRF6qlkxulK2tf3t79TQOAk1ywBMVOI=
------------------2--------------------------
------------------3--------------------------
| 类型: SolarWinds.Orion.Core.Models.Credentials.SnmpCredentialsV2
| 名称: public
|       描述:
|       所有者: Orion
|               团体名: public
------------------3--------------------------
------------------4--------------------------
| 类型: SolarWinds.Orion.Core.Models.Credentials.SnmpCredentialsV2
| 名称: private
|       描述:
|       所有者: Orion
|               团体名: private
------------------4--------------------------
------------------5--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.UsernamePasswordCredential
| 名称: Erlang cookie
|       描述: Erlang 集群 cookie
|       所有者: Erlang
|               密码: abcdefg12456789abcde
|               用户名: ignored
------------------5--------------------------
------------------6--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.UsernamePasswordCredential
| 名称: RabbitMQ user account
|       描述: 消息总线的 RabbitMQ 用户帐户
|       所有者: RabbitMQ
|               密码: LtVmCrzlTNyWmwxpxJMi
|               用户名: orion
------------------6--------------------------
------------------7--------------------------
| 类型: SolarWinds.Orion.Core.Models.Credentials.SnmpCredentialsV3
| 名称: 用户: snmpv3user, 上下文: thisisthecontext
|       描述:
|       所有者: Orion
|               AuthenticationKeyIsPassword: false
|               AuthenticationPassword: ASDqwe123
|               AuthenticationType: SHA1
|               Context: thisisthecontext
|               PrivacyKeyIsPassword: false
|               PrivacyPassword: ASDqwe123
|               PrivacyType: AES256
|               UserName: snmpv3user
------------------7--------------------------
------------------8--------------------------
| 类型: SolarWinds.Orion.Core.Models.Credentials.SnmpCredentialsV3
| 名称: 用户: rootsnmpv3, 上下文: newcontextv3
|       描述:
|       所有者: Orion
|               AuthenticationKeyIsPassword: true
|               AuthenticationPassword: ASDqwe123
|               AuthenticationType: MD5
|               Context: newcontextv3
|               PrivacyKeyIsPassword: true
|               PrivacyPassword: ASDqwe123
|               PrivacyType: AES128
|               UserName: rootsnmpv3
------------------8--------------------------
------------------9--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.UsernamePasswordCredential
| 名称: DomainAdmin
|       描述:
|       所有者: Orion
|               密码: ASDqwe123
|               用户名: SITTINGDUCK\uberuser
------------------9--------------------------
------------------10--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.UsernamePasswordCredential
| 名称: DomainJoiner
|       描述:
|       所有者: Orion
|               密码: ASDqwe123
|               用户名: [email protected]
------------------10--------------------------
------------------11--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.UsernamePasswordCredential
| 名称: vesxi
|       描述: vesxi
|       所有者: VIM
|               密码: ASDqwe123
|               用户名: root
------------------11--------------------------
------------------12--------------------------
| 类型: SolarWinds.Orion.Core.SharedCredentials.Credentials.ActiveDirectoryCredential
| 名称: SITTINGDUCK\uberuser
| 	描述: 
| 	所有者: Orion
| 		密码: ASDqwe213
| 		用户名: SITTINGDUCK\uberuser
------------------12--------------------------
------------------13--------------------------
| 类型: SolarWinds.APM.Common.Credentials.ApmUsernamePasswordCredential
| 名称: App Monitoring User
| 	描述: 
| 	所有者: APM
| 		密码: ASDqwe123
| 		用户名: SITTINGDUCK\uberuser
------------------13--------------------------
------------------14--------------------------
| 类型: SolarWinds.SRM.Common.Credentials.SmisCredentials
| 名称: EMC_SMIS_Solarwinds
| 	描述: 
| 	所有者: SRM
| 		HttpPort: 5988
| 		HttpsPort: 5989
| 		InteropNamespace: /interop
| 		Namespace: root/emc
| 		密码: ASDqwe123
| 		用户名: solarwinds
| 		UseSSL: true
------------------14--------------------------
------------------15--------------------------
| 类型: SolarWinds.ESI.Common.Connection.ExternalSystemCredential
| 名称: ESC
| 	描述: 
| 	所有者: ESI
| 		密码: ASDqwe123
| 		用户名: solar_winds
------------------15--------------------------
------------------16--------------------------
| 类型: SolarWinds.Orion.Web.Integration.OAuth2Token
| 名称: SITTINGDUCK\uberuser
| 	描述: 
| 	所有者: Web.Integration
| 		AccessToken: GthQHd3<snip>
| 		AccessTokenExpiration: 2020-11-01T10:52:50.2768075Z
| 		AccessTokenIssueDate: 2020-11-01T09:52:51.2768075Z
| 		RefreshToken:hEyph9WqIfzm<snip>
| 		Scopes: 
| 		用户名: [email protected]
------------------16--------------------------
------------------17--------------------------
| 类型: SolarWinds.SRM.Common.Credentials.XtremIoHttpCredential
| 名称: XtremIO_Admin
| 	描述: 
| 	所有者: SRM
| 		HttpPort: 80
| 		HttpsPort: 443
| 		密码: ASDqwe123
| 		用户名: admin
| 		UseSsl: true
------------------18--------------------------
============================================
============================================