AX Jeeves

Can you give me any hint for jeeves? Because I ran dirb, gobuster with some wordlists, but I found nothing…

I found the admin credentials to login as admin. But I don’t know how to find root.txt file :frowning:

You may have to look for an ‘alternate’ way of looking at the directory…

can someone dm me for getting a foothold on jeeves? I swear I am going crazy

@R0b1n said:
can someone dm me for getting a foothold on jeeves? I swear I am going crazy

Teel us what you have so far?

Any hint for reverse shell? without admin credentials?

Maybe it will help… http://h4x.life/2018/01/08/bind-shells-and-reverse-shells-with-netcat/

Hi who can help me with the root flag? I got the user.txt and i can use powershell and also meterpreter, but i don’t found any hidden files and i don’t know how to privesc. I hate windows and this is why i have no much skill with it but i think to know how to search files also in subdirectories. I used dir with different options, but nothing. I have different hashes but i’m not sure that are usefulls. Who can pm me?

Hi,

What tool did you guys used to pass the hash manually ?

I tried wce, mimikatz, psexe and didn’t manage to make it work

Is there someone here who I can pm about transferring files from the Jeeves box to my own? I just haven’t been able to set this up, probably thinking about it in the wrong way.

I used meterpreter

Struggling here… Got user via the console like most have but i can’t seem to get further.
I’m thinking i need a better shell so trying to catch a reverse meterpreter via various methods. no luck.
also working on cracking on the hashes found in the .k*** file and the one in the .xml file (not sure which one i need - if any?) but can’t seem to get any joy.

Would love to run what im doing by someone for a sanity check in pm if anyone could spare a mo?

@Mumbles said:
Is there someone here who I can pm about transferring files from the Jeeves box to my own? I just haven’t been able to set this up, probably thinking about it in the wrong way.

PM me if you like… but there is a very intersting readme laying around that explains exactlty what you need to do

The root flag is in the administrator folder? I don’t find it! >.<

Nevermind, got it

Me, too. ?

If anyone can help point me in the right direction with regards to priv esc, please shoot me a PM. Thanks.

Anybody else having issues accessing the webapp today.

Finally rooted. That was a mindbender