Heist

HTB Content Machines
21

Slowly learning to be more thorough. Enumerate, enumerate, again, then enumerate some more. Not done yet but making progress

22

.

23

The found credentials are def used after some more in depth enumeration!

24

that sha256 is rabbit hole ?
edit :- rooted
hint- its not rabbit hole :smiley:

25

Found creds, can’t find anywhere to use them, either getting a failed login or a timeout depending on the ports, if anyone could give me a nudge in the right direction, I’d appreciate.

26

Type your comment> @b4nna said:

that sha256 is rabbit hole ?
edit :- rooted
hint- its not rabbit hole :smiley:

you mean the other PW type is is not like the rest?

27

is the ***$ share the way to go? seems like a dead end

28

removed.

29

im just going to throw my carbon out the window… leaving home without a option to ssh into my box with my graphics card in just resulted in my laptop becoming a whining beast.

31

Finally rooted :slight_smile: thanks @MinatoTW

32

“Slightly” stuck here… Got the 2.5 creds, worked on them and got the output I wanted to. However, I really can not see a place where I could fo further those. Any hints appreciated…

33

I could use some hints please

34

i got the creds and craked them and then tried to exploit win** via metasploit but always it throw Login failure! Recheck supplied credentials

any hint please

35

sazouki, its broken in msf (afaik)

36

Spoiler Removed

37

@Ketil any recommendations on tool/script to run commands over win**?

38

there is a ruby library which is working well

40

Type your comment> @Seepckoa said:

@ssumkin said:
“Slightly” stuck here… Got the 2.5 creds, worked on them and got the output I wanted to. However, I really can not see a place where I could fo further those. Any hints appreciated…

Try to find a service that will allow you to connect. :wink:

with msf or no need cuz it will throw error

42

Type your comment> @Seepckoa said:

Type your comment> @sazouki said:

 Type your comment> @Seepckoa said:

              @ssumkin said:
   "Slightly" stuck here.. Got the 2.5 creds, worked on them and got the output I wanted to. However, I really can not see a place where I could fo further those. Any hints appreciated...

 



      Try to find a service that will allow you to connect. ;)





  with msf or no need cuz it will throw error

What mistake do you make? You just need to know what passwords can match and what kind of service.

what i did is tried the usernames and their cracked pw, maybe i was wrong

44

@seepckoa I managed to get ha***** creds to fit somewhere. However, the high 5*** ports is not accepting any of the combinations I am throwing at it…