Footprinting medium machinr

HTB Content Academy
76

Okay , I’m really struggling to the point imposter syndrome is creeping in.

So it seems like one of the first few steps I have to do is mount. I used the standard mount command but it didn’t work. I was able to mount after sudo mount. Now , I tried to cd into the mounted directory, but I’m having and access issue. Some people are saying something about ‘root’ but im honestly lost. Any advice is super appreciated :))

77

Hi , I know this was a whiel ago, but did you end up solving this ? I’m also stuck at the noboy previlige and even if i have the nfs mounted, i cannot access to the directory because of PERMISSION DENIED

78

Sometimes you’re not allowed to change to certain directories as an unprivileged user.

79

FINALLY solved.

I in the end used the HTB discord for further advice and deepdive. For those who are struggling, if I can do this ( And trust me it took me days to solve this. ) You CAN.

Some hints

  1. yes mount is probably the good start
  2. having permission issue ? try to search root command for linux. Don’t think too much about trying to ‘cd’ the mounted directory
  3. I actually used ‘grep’ and ‘find’ alot
  4. Once accessing RDP, try looking into the Windows UI for some clue. You are not that far from the goal.
83

yes and alex’s credentials and it gives me an error

84

Once again Reconfigure your vpn file and try it again

image

1 Like
87

If you are still struggling check out this video.

https://www.youtube.com/watch?v=hJhienEcm_U

88

Thanks for SQL query. It salved me

89

If you are stuck, then following reading can help you understand what needed to be done.

First , do nmap scan and understand what type of server is it and what the server is running and take note of the fact that everyone can access it.

Understand the meaning and concept of exports in NFS

Exporting a directory declares that a directory in the server's namespace is available to client machines. If you see a directory as NFS export (a directory that has been exported by an NFS server), then it means that a user can mount it. Mounting a directory makes the files that reside on the NFS server available to the user.

And then read this NFS command.

https://www.thegeekdiary.com/showmount-command-examples-in-linux/

also, read this basic info about SQL server command

https://www.datameer.com/blog/sql_how-to-display-all-the-tables-from-a-database/

90

I know this is a bit late. For anyone else with this issue, start the application in admin mode using the SA credentials. From there, it’s just a matter of searching for the username and password.

3 Likes
94

important.txt is an empty text file thought?

96

Important.txt is not empty it has a very small string right at the beginning of it. If it is empty I would suggest reloading the machine

98

Did you guys think this lab was easier than the easy lab? I did. I had way less trouble with this one.

102

I am just wanting to learn the point where i am stuck … like what was wrong in my initial scan… why i was not able to get the MSSQL serve port using -p- scan… rest i am ok with the lab

103

From my notes related to “Footprinting Lab - Medium”. there are are no ports related to MySQL or MSSQL which can be discovered.
For reference i have used the following Nmap scan ‘sudo nmap -sS -sV -sC -A -Pn --top-ports 1000 10.129.29.234’

My only hint for you to go forward is to check the NFS.
good luck.

104

Thanks i have already mounted the NFS and working on it. Thanks

2 Likes
105

please PM … I have right click and perfrm the same step… unable to switch to new user

106

hi! unable to run sqlsrv as a different user. can you give me a hint?

108

Right click and run as administrator?

1 Like
110

yes did it but the password is not working on local admin or admin account