Type your comment> @1NC39T10N said:
Got Root. The obvious app is the path forward once you get user. Keeping google the app and you will find tutorials and conversations that will give you everything needed to get this box.
- Find something juicy.
- That juicy thing doesn’t work out of the box. “Think like a user”. You’re in.
- Find a way to blindly “alert” yourself. Depending on how you do this, there may be a step 4: Utilize that famous windows service to profit (via Impacket)
PS. NO BRUTE FORCING REQUIRED. I doubt the password is even in any wordlists. Don’t waste your time and destroy the box for anyone else.
Fantastic hint. I made a mistake in not using ls -la this cost me some precious time for getting the creds.