Metasploit scan, SMB spray, EternalBlue, and pirate NTLM dump

METASPLOIT: EXPLOITATION was a controlled lab validating the framework as an engagement accelerator — not a substitute for methodology. From msfconsole we ran portscan modules (five ports open), SMB/NetBIOS auxiliaries (NetBIOS name ACME IT SUPPORT), and service fingerprinting (port 8000 → webfs/1.21). smb_login against user penny with the engagement wordlist recovered leo1234. Vulnerability modules and exploit selection led to a critical Windows SMB path (ms17_010_eternalblue pattern) with windows/x64/meterpreter/reverse_tcp. Post-exploitation search located flag.txt (THM-5455554845); hashdump yielded pirate’s NTLM 8ce9a3ebd1647fcc5e04025019f4b875. SMTP open-relay scanner authorship noted as Campbell Murray for module hygiene tracking. Workspace/database features were used to keep hosts and loot organized across the short engagement window.