Official EscapeTwo Discussion

Chirag777 · January 12, 2025, 11:53am

why no one helping me eee

5tr1d3r007 · January 12, 2025, 11:54am

Where you stuck? May i can help you

Chirag777 · January 12, 2025, 11:54am

bro got sql_svc password what to do next

MEGAZORDII · January 12, 2025, 11:55am

what you mean?

Chirag777 · January 12, 2025, 11:57am

ok thanks bro this is my first windows machine

Chirag777 · January 12, 2025, 12:31pm

got user flag

zzero · January 12, 2025, 12:59pm

i need help to do the RCE in sql

Chirag777 · January 12, 2025, 1:04pm

bro u don’t need rce

ethical83 · January 12, 2025, 3:26pm

please someone can help me to read file?

marc4442 · January 12, 2025, 4:04pm

Done…

whoami
sequel\administrator

BishalBhandari · January 12, 2025, 4:11pm

Need Hint guys, I am stuck at SPN hashes sql_srv. Hashcat cannot crack the password.

dugong79 · January 12, 2025, 4:15pm

Urgh… I am missing this step.

Champ12n · January 12, 2025, 4:28pm

Someone a liiitle hint on root?

BishalBhandari · January 12, 2025, 4:38pm

any hint on Cracking the sql_srv kerberos 5, etype 23, TGS_Rep hash. I have already tried hashcat and john.

Viperr · January 12, 2025, 5:23pm

man when you miss the important share and spend your Saturday evening dissecting NTUSER.DAT with trash tools for information that isn’t there can’t make it up

BishalBhandari · January 12, 2025, 5:36pm

haha I also tried to dissect NTUSER.DAT but no luck

pixelrazer · January 12, 2025, 5:38pm

Any nudge for priv esc?

olliz0r · January 12, 2025, 5:53pm

Bloodhound

g1ing3rsou1 · January 12, 2025, 6:00pm

Anyone want to throw a nudge? Stuck on once I gain

ps cmd access to sql**** and am unsure how to progress

BishalBhandari · January 12, 2025, 6:07pm

Can anyone hint me where i am going wrong. First i check the smb using rose creds and found the NTUSER.DAT on the Default Folder Using SMBClient and I am stuck at here. i also use nxc smb --rid-brute. need only a hint not a spoiler. i cannot even connect usign evil-winrm.