HTB Academy: Windows Privilege Escalation DnsAdmins

Hello everyone, I put the user netadm in the administrator group with the injection of the dll but I can not have access to the file flag.txt. Also starting the cmd as an administrator.

Solved the problem.

@5n34ky How did you solve the problem? Any nudge?

When add user to administrator group you must to restart the Windows machine. After login you can read the flag.

1 Like

How did you restart the machine? If I reset the machine, obviously all of my stuff is gone. And in the start menu I can only logout/close the RDP session

Ok got it too

Nice