Finally rooted! That was a steep, frustrating learning curve! Highlighted how much I have to learn with Windows/Powershell boxes!! New tools and new techniques, thanks @MinatoTW for the challenge :)
Finally owned it! User was much more difficult than root - I certainly over-complicated, over-thought every step and went down every rabbit hole! Note to self: Keep it simple stupid :)
Thanks to @beorn and @MrW0l05zyn for the nudge with foothold.
PM…
hi guys,
i am able to get the CVE script to login, but it fails at "retrieving the poller_token". I'm not sure what I'm doing wrong/missing - anyone else seeing this issue? Not sure if its a wall thing or something else. All help appreciat…
After hours pulling my hair out, using nmap scripts, metasploit modules and every variation of the output of the port as a password - it came to me...find a tool you haven't used before! hey presto I'm in and off and running. Amazing what a walk to …
Wow that was painfull!! Almost two full days with a reverse shell and many rabbits holes later and I finally got root. Turns out I had all needed for a while but just didn't use it correctly. Lessons learnt, but I still don't like Windows boxes!
Finally!!!! got user.txt - been trying for hours with the bloomin' username problem. It's easy when you get it but SO frustrating when you just can't "see" it!