Frolic

@Edddie said:
I just can’t figure out what to do after decoding the idk********** string. I have enumerated all stuff I can think of. Any help is appreciated!

I’m in the same boat. I was able to get a few usernames by enumerating the web service, the shell service, and the file sharing service, but no combinations of the credentials I’ve found seem to work anywhere. The file sharing service doesn’t seem to have any files in anything I can access regardless of creds.

@Norrz said:
So I found this index.php file in the ZIP, but it appears to be some kind of encrypted code?
I have no clue as to where to start with this code, a hint would be much appreciated.

The filename is, as far as I can tell, a total mislead. Inside is just encoded, not encrypted, but is encoded twice. The first encoding is just a common way to write binary numbers in shorthand, and the second is a slightly more efficient (but harder to read) way to do the same.