Forum Discussion
domel44
Bronze II
2 months agoAdvanced CTF Challenge: Hardened Maze
Hi Team, I found file upload options on one port but get information: "For authorized personnel: Upload a critical security patch." I tried with many extension with curl and POST method with -F "e...
- 2 months ago
Try fodhelper again manually.
autom8on
Silver I
2 months agoYou might want to look here... List of Executable File Extensions - Windows - Aerorock ;-)
domel44
Bronze II
2 months agoThanks - i got reverse shell to the windows host but cannot find the way to escalate privileges to view token because host is in WORKGROUP not domain member...
- Nneka_AN2 months ago
Silver I
Hi Domel44! How did it go? Any progress?
- domel442 months ago
Bronze II
Hi Nneka_AN - no progress :/
i try all metasploit reverse shell bypass UAC payloads - don't work
also try from windows machine run multiple tools fodhelper, eventvwr, sdclt to try bypass UAC but no luck. Read articles about this:
https://medium.com/@RosanaFS/bypassing-uac-tryhackme-walkthrough-c74818f11bbf
maybe I'm trying to approach this from the wrong side, i don't know :)