Forum Discussion
Xat
1 year agoBronze III
Human Connection Challenge: Season 1 – Windows
After the other Human Connection Challenges, I'm now completely stuck on Machine 1 of the Human Connection Challenge: Season 1 – Windows lab. I found the obvious hidden credentials the the: [ Spo...
- 1 year ago
Hi Xat I feel your pain, I got very frustrated with this one too, but it's a good example of how easy it can be to fall down several rabbit holes! I don't know how much to give away but sometimes it pays to get 'Brutal' with all exposed services (some of the enumeration you've done might be a breadcrumb to other viable accounts too).
steven
Ambassador
1 year agoXat the answer is simple: imagine you know a well known user on the system (no, it's not IMLuser, it's the other one existing on all windows ...) and you want to try to find the password.
the keyword for your google search is: windows password spraying attack
- Al13nz1 year ago
Advocate
Funny thing about Microsoft is they don't add lockout policies by default to certain 'Built in accounts' ;p