Querier

Can someone please PM me on how they did file transfers on this box? I have the m****-s** account, but I have no idea how to go from s** and file transfer to the actual server. I’ve tried p*sh, ftp, etc… Hints please!

can someone pm me how to find cred file what you guys mention, I tried many tools for smb port but nothing be shared

If your payloads for root aren’t working, this could be why: This script contains malicious content and has been blocked by your antivirus software.

Also, x*_c******* repeatedly gets disabled on its own after enabling. I assume for the same reason as above.

Still trying to get root… I have a feeling a facepalm will be in my future…

ignore

Got root.txt. This is one of the best machines in HTB. I learned a lot in Windows world. Thats my weakness. WIth Giddy and this machine. I learned a lot in windows.

Thanks for makers for your time and effore @mrh4sh and @egre55

Thanks for @1NC39T10N @Malone5923 and @LegendarySpork for hints and help during this machine.

PM me for hint or nudge.

deleted

You kids and your fancy modern technology for getting root. I just looked.

I have root, thanks a lot, if you need help, PM me.

Hi …
I got into SQL … trying to get a shell using x**l and nis …Getting a syntax error …Can anyone help me …Please pm …thanks

I have command execution using X**l

EDIT :- NVM …Got user shell!!

Type your comment> @sillydaddy said:

Hi …
I got into SQL … trying to get a shell using x**l and nis …Getting a syntax error …Can anyone help me …Please pm …thanks

I have command execution using X**l

Did you enable it first?

Type your comment> @mcruz said:

Type your comment> @sillydaddy said:

Hi …
I got into SQL … trying to get a shell using x**l and nis …Getting a syntax error …Can anyone help me …Please pm …thanks

I have command execution using X**l

Did you enable it first?

try help !

ok, stupid question … have another user with admin and his password (since i created him), how do i switch to him in cmd or ps, everything hangs on me :frowning:

Type your comment> @ntroot said:

ok, stupid question … have another user with admin and his password (since i created him), how do i switch to him in cmd or ps, everything hangs on me :frowning:

I’m having the exact same problem… let me know if you make progress

At last got root flag …

Would love to know how to get a root shell … Tried creating new credentials in power shell with two uncles and start-process to get a reverse shell

Type your comment> @panic said:

Type your comment> @ntroot said:

ok, stupid question … have another user with admin and his password (since i created him), how do i switch to him in cmd or ps, everything hangs on me :frowning:

I’m having the exact same problem… let me know if you make progress

I think you are at a previous step before admin user

I got a root shell using a common (?) Windows priv esc method - but I don’t get what you all mean by ‘uncles’ :slight_smile:

@kekra said:
I got a root shell using a common (?) Windows priv esc method - but I don’t get what you all mean by ‘uncles’ :slight_smile:

Hmm… you may have found someone else’s backdoor. I believe everyone should know about the uncles by the end. Actually, you may have found a clever way to execute the privesc I was trying to use.

Sorry mis-post. Asked this earlier, browser cache is to blame (and a bit of layer 8).

Type your comment> @ntroot said:

ok, stupid question … have another user with admin and his password (since i created him), how do i switch to him in cmd or ps, everything hangs on me :frowning:

Check if you are using the most up to date version

@panic said:
Type your comment> @ntroot said:

ok, stupid question … have another user with admin and his password (since i created him), how do i switch to him in cmd or ps, everything hangs on me :frowning:

I’m having the exact same problem… let me know if you make progress

Check if you are using the most up to date version