HTB Academy: Windows Privilege Escalation DnsAdmins

Hello everyone, I put the user netadm in the administrator group with the injection of the dll but I can not have access to the file flag.txt. Also starting the cmd as an administrator.

Solved the problem.

@n3tc4t How did you solve the problem? Any nudge?

When add user to administrator group you must to restart the Windows machine. After login you can read the flag.

2 Likes

How did you restart the machine? If I reset the machine, obviously all of my stuff is gone. And in the start menu I can only logout/close the RDP session

Ok got it too

Nice

How did you restart it? I am also stuck with access denied and I have tried reopening the RDP session.

If you sign out from the start menu and reconnect that worked for me

That worked thank you very much. I spent a lot of time trying to find out what I did wrong.