Type your comment> @slixperi said:
anybody else getting a bunch of errors when running enum4linux?
Do you get an user list from Enum4Linux ?
Type your comment> @h0plite said:
Type your comment> @slixperi said:
anybody else getting a bunch of errors when running enum4linux?
Do you get an user list from Enum4Linux ?
affirmative
Type your comment> @slixperi said:
Type your comment> @h0plite said:
Type your comment> @slixperi said:
anybody else getting a bunch of errors when running enum4linux?
Do you get an user list from Enum4Linux ?
affirmative
works on the list: continue the enumeration.
Great box, thanks to the creators! 
If anyone needs any slight nudges, feel free to PM.
Type your comment> @tarxien said:
Iām getting the following with the remote py tool, despite using various parameters and making changes to my hosts file. Obviously Iām missing something, is someone able to discuss by PM?
dns.exception.Timeout: The DNS operation timed out after 3.00170922279 seconds
For those trying to use the dog remotely with the snake, use the FQDN version of the domain name.
Type your comment> @h0plite said:
Type your comment> @slixperi said:
Type your comment> @h0plite said:
Type your comment> @slixperi said:
anybody else getting a bunch of errors when running enum4linux?
Do you get an user list from Enum4Linux ?
affirmative
works on the list: continue the enumeration.
should i get pwd? i got s**-a****** 's TGT so .what should i do.
anybody can help me. now i have six unames and i have s**-a****** 's TGT .so what should i do . use hashcat and john, or ?
Type your comment> @N0phone said:
Type your comment> @h0plite said:
Type your comment> @slixperi said:
Type your comment> @h0plite said:
Type your comment> @slixperi said:
anybody else getting a bunch of errors when running enum4linux?
Do you get an user list from Enum4Linux ?
affirmative
works on the list: continue the enumeration.
should i get pwd? i got s**-a****** 's TGT so .what should i do.
What can you normally do to get more information from a hash?
Did anyone else have the problem with SH or IBH**, where no output is shown and no J**N os Z*P file created. So basically not working at all? And how did you solve it?
Type your comment> @demesm said:
Welp, I wasted an entire day because I didnt check the download from git, downloaded an HTML file saved as sharphound.ps1 LOL, the journey continues
It wasnāt until I read this I thought I better double check as well, turns out you werenāt the only one who did thisā¦ doh!!!
Type your comment> @N0phone said:
anybody can help me. now i have six unames and i have s**-a****** 's TGT .so what should i do . use hashcat and john, or ?
if you have not figured it out yet, look up tools to play with TGTs and attack techniques utilizing TGTs. There might be some retired machines that might help you with how to approach this box
Got User. Impacket have some great tools indeed.
Iām know almost nothing about Windows PrivEsc, hopefully the tips that iāve read will help me.
Type your comment> @glassesboy said:
Did anyone else have the problem with SH or IBH**, where no output is shown and no J**N os Z*P file created. So basically not working at all? And how did you solve it?
Same problem, any idea?
Type your comment> @glassesboy said:
Did anyone else have the problem with S****H**** or I******B****H****, where no output is shown and no J**N os
Z*P file created. So basically not working at all? And how did you solve it?
Same problem, any idea?
About this, I just used I*****-B********d with userās pass. PM if you need help.
WOOO!!! Finally got root on my first non-retired machine. Feels great! Got some nudges and help from good people! Took some notes for my own personal notebook
Thanks again everyone! This was a fun one!
Fine fine! I need a nudge am trying a few different vectors; I got user via E***-****m I tried uploading ps1 and running as a domain user but no luck (no output). I decided to walk the dog with the snake and even using FQDN I keep getting DNS time out. Pm or hints welcomed just no direct solutions.
Another fantastic box that really exposes how much I still have to learn about Windows. I think that giving any additional hints about this machine is unnecessary because everything you need to know is in this forum.
Hey guys, please pm me I have got a user and a hash from using some impacket tool, but I can not get a password from it.
I have also use some impacket script to pass a hash for authentication, without any success 
Hi All,
Iām struggling (like many others) with Root
Iāve walked the dog using the snake and I think I have found the path I need, the one that will give me all the d***s anyway,
I managed to create a user, I also have a TGT for that user.
I donāt know If Iāve gone well off of the path here or not,
If any of you good people could drop me a PM with some nudges I would be really grateful.