Heist

@StevenKennyIT said:
Quick question for anyone who has the time:

Am I meant to be able to successfully login/authenticate to the wm service using the hd account? Or, am I meant to do password guessing against the users obtained from l******d.py ? Any help is appreciated

If you’re using metasploit, the winrm modules don’t work with the correct creds while the previously mentioned ruby scripts do work for it (like the shell version from alionder.net)

You’ll need to crack all three passwords and try the users from l*******d.py with those passwords