I feel like I’m going mad with this box!! I have managed to get an initial foothold, so now working on uploading either an msfvenom payload for a meterpreter shell (.exe file) or another Powershell script (.ps1 file) for exploit enumeration. I am using the iex(new-object net.webclient).downloadstring to try to upload, and I can see the 200 OK response on my Python HTTP server, so I know the files are being retrieved, and the command line on Bounty returns no error codes, so all looks fine, but when I check the contents of the directory I’m running the command from there is nothing to be seen! File locations I’ve tried:
C:\Temp (after creating it);
C:\Users\Merlin\Desktop;
C:\Users\Merlin\appdata\local\temp.
I have also tried using gci -force on all locations that I’ve saved the file to and nothing shows. I have confirmed I have permissions on the directories I’ve been using with icacls. I have also tried resetting the box, but nothing has changed.
I really feel like I’m missing something REALLY obvious here - can anyone provide some guidance?
Anybody trying to solve this in 2024? Let me know if you face any issues. I would love to help if you are stuck as was I.