Also rooted, a very well made box and a nice touch of realism, really liked the approach of sqli something i’ve never done before at least not in this way.
I expected to see an output in the browser and i thought i was doing something wrong.
hint for user : Do it manual, don’t overthink it.
root : i felt so dumb after tried everything but was using the wrong name for the service, i really don’t know what i was thinking.
Hint : Once you gain access through that poweshell web access, it is really right in front of you, google it 