Finally got r00t, if you stuck on root.txt, read this carefully
- make sure you know where is the full path of root.txt
- you can check with c_dk_y /list of course the Administrator is save the password in Credential manager
- Somehow type command doesn’t return output when you combine with r__as command, so I hope you know how to redirect output to somewhere with the full path of file you want to read, and where you want to store.
- You just need 2 options /u__r of course, and /sa__c__d
I hope it help