My payload was this:
1 - I put a gun on my head
2 - push the trigger !!!
3 xD
fkn box
1 Like
try to reverse *.exe
Time for privesc now
I’m not sure why but e*****c is not running anymore
(at least not open to connection, is this normal or should i reset the box?
okey, thanks I’m now dealing with teh fucking payload
Finally got the payload working and got user. There is some good advice here on how to proceed, but I would suggest looking around for several options and trying them. Feel free to message for pointers if you’ve been stuck for ages.
Big shout out to @josephalan42 and @FabFromTheSnow for their guidance in getting things working.
6 Likes
Anyone care to share a hint for the privesc? I found some files and ran some things, but stuck halfway (I hope)…
Hi, hint for those who think they have the right payload for the foothold, but cant get RCE. Even if it works in local setting.
If you are sending the payload via Burp do not forget, that some characters in base64 have special meaning in URL parameters. Encode them.
1 Like
small hint for user:
For those that are struggling with certain payload, dont give up, you just need to find a way to make the code RUN, pay attention to the external linked blog post.
4 Likes
Can anyone give me a nudge on how to decrypt, I acquired the 2 parts that are necessary for it
Rooted !!
3 Likes
Yooo I got root!! Thx @josephalan42
2 Likes
I am stuck at privesc
i found the .exe file and .e* i got the blb and s**d but I don’t know how to get the password for the b***p user
Finally rooted, this machine was a pain in the a**.
Eventually I got it!!
Man, its so frustranting spent so many time with a misconfiguration payload. It was so many tries that im not sure what is really necessary.
In the end, compiling the payload with x86 was what make it works.
At the moment im discouraged for the root.
1 Like
everybody stuck on the payload, I can’t even find the place to put it 
can anybody suggest me what to look for?
1 Like
Look the post in the internal domain. The external links have the answer.
1 Like
The same has been happening to me
1 Like
I finally got backup user but can’t do the final leap tried PSExec but is giving me issues
Edit:
Man this was an amazing journey
3 Likes
