Footprinting Lab - Medium

[spaceboy20]

I managed to gather different credentials from many services and when i try to access to the sql server using the software it throws this error, what should I do?

TITLE: Connect to Server

Cannot connect to WINMEDIUM.

---

ADDITIONAL INFORMATION:

A connection was successfully established with the server, but then an error occurred during the login process. (provider: Shared Memory Provider, error: 0 - No process is on the other end of the pipe.) (Microsoft SQL Server, Error: 233)

For help, click: MSSQLSERVER_233 - SQL Server | Microsoft Learn

---

No process is on the other end of the pipe

---

BUTTONS:

OK

[jameskhor]

Footprinting medium machinr

For those who are still stuck. After you mount nfs with nobody, you have sudo on your pwnbox, your sudo password is on your desktop. After you sudo you should be able to access TechSupport folder, use Grep to find the pass/user. Use the credential found to RDP. I was stuck here while using xfreerdp. Use Remmina in your pwnbox to rdp to target. Look for ‘important’ file. important file is local administrator password use that password and try to "run as administrator " navi…

Take a look here

[gitgud]

@Footprinting medium machinr

For those who are still stuck.

After you mount nfs with nobody, you have sudo on your pwnbox, your sudo password is on your desktop.
After you sudo you should be able to access TechSupport folder, use Grep to find the pass/user.
Use the credential found to RDP. I was stuck here while using xfreerdp.
Use Remmina in your pwnbox to rdp to target.
Look for ‘important’ file.
important file is local administrator password
use that password and try to "run as administrator "
navigate around, and some basic SQL WHERE statement.

Lifesaver - thanks!

[pim6970PIpfxAaDkSjsX]

I had a problem with rdesktop and wasted too much time because couldn’t connect via rdp. I found the ‘important file’ using smb. Thank you very much you and remmina. Do you know what problem with other rdp clients? I’m using kali on VM instead of Pwnbox.