Access

Hi all , Ive got root and User but i am stuck with the Certutil.exe command on windows . I get this error each time i try to run the command .
Any Suggestions to why this strange error would be amazing :
**** Online ****
CertUtil: -URLCache command FAILED: 0x80072efd (WIN32: 12029)
CertUtil: A connection with the server could not be established

I noticed i couldnt ping the host machine from the victim .
Can anyone PM for solutions please :slight_smile:

Which program did you use to open *.mdb file? Can anyone help? I am using Parrot OS
Edit: NVM, I got it

@SSJ26 said:
Which program did you use to open *.mdb file? Can anyone help? I am using Parrot OS
Edit: NVM, I got it

mdb-e****t ***.mdb

Hey guys,

Well, I rooted the machine and it was very interesting to learn the way how you need to do it. I got the R**** command working but just not comfortable because I did not find the hint that a lot of people found about why to use that command. If someone can please PM me about that, it would be nice.

EDIT:Never mind! I found the shortcut that everyone was talking about. I remember I saw it but did not pay enough attention to it. Well, BIG lesson learned here. Again, you need to be detail oriented to don’t waste time when things are just right there.

Thanks,

PP

Finally Rooted the box !! It was fun

PunkySnake, please, only one question… Need atack any of Windows local for priviesc Or exploit remote. Prívate for any público hint. Ty.

Hey everyone. I got user access and I have the command pretty much figured out but i’m not getting a return. I’m new the windows machines and any help would be great. I hear there is a file on the machine that gives hints but I can’t find it.

got user

Just got root - pretty fun/frustrating box and helped me learn a lot about windows syntax!

User is straight forward, but root is a diff kettle of fish (thanks to @Sharka for your nudge in the right direction)

PM me for hints if you’re truly struggling

Rooted! very fun machine with a lot to take away from windows privesc (in a way)
PM me if you need a nudge :wink:

i dont know whta i am missing i have credentials which i get from m*** but what to do next ?anyone can help here ?

@coolrebel said:
i dont know whta i am missing i have credentials which i get from m*** but what to do next ?anyone can help here ?

What other ports are open which require credentials to access? Have you tried logging into them with the credentials you got?

@deviate said:

@coolrebel said:
i dont know whta i am missing i have credentials which i get from m*** but what to do next ?anyone can help here ?

What other ports are open which require credentials to access? Have you tried logging into them with the credentials you got?

Thanks bro Thanks alot lol i am stupid i miss that one

Stuck on root. I have T**** with s******* and confused on where to go next. I am new to Windows commands.

Got User. Been 2 hours and stuck using r****. If anyone is willing to help with a slight nudge (with me providing what i’ve done thus far), would be appreciated! Thank you.

Edit: Root

Rooted! Thanks to that one super helpful lad on the Discord! Feel free to dm for a nudge or two!

successfully downloaded both files and able to open b***.md* file.
can someone help me what table to look in to get password for other file.
Thanks

I too am banging my head against a wall with privesc.

Edit. Okay, I am still stuck here, no idea what this command people are talking about is. :anguished:

This is really a cool box. I had sysadmin, changed all the privileges, had gui access to make my life easier, instead, I still couldn’t access the root flag.
After checking all the good hints left here, I decided to take a step back, reset the box, used the r**s directly with the syntax discussed all over here… boom, got the flag.
So here are my questions:

  1. why admin cannot access the file while owner/privileges have all been correctly set?
  2. why the same syntax I used to get the flag won’t work if I altered file permissions?

Please PM me so that I can learn all the way, also if anyone need a hint, feel free to PM me as well. :lol:

Should I use rs command as user s**** or maybe I need to get the password for another non-system user?