Forum Discussion

Xat's avatar
Xat
Icon for Bronze II rankBronze II
18 days ago
Solved

Human Connection Challenge: Season 1 – Windows

After the other Human Connection Challenges, I'm now completely stuck on Machine 1 of the Human Connection Challenge: Season 1 – Windows lab. I found the obvious hidden credentials the the: [ Spo...
help & support
  • Al13nz's avatar
    Al13nz
    15 days ago

    Hi Xat I feel your pain, I got very frustrated with this one too, but it's a good example of how easy it can be to fall down several rabbit holes! I don't know how much to give away but sometimes it pays to get 'Brutal' with all exposed services (some of the enumeration you've done might be a breadcrumb to other viable accounts too).

steven's avatar
steven
Icon for Silver I rankSilver I
15 days ago

Xat the answer is simple: imagine you know a well known user on the system (no, it's not IMLuser, it's the other one existing on all windows ...) and you want to try to find the password.

the keyword for your google search is: windows password spraying attack

Al13nz's avatar
Al13nz
Icon for Bronze II rankBronze II
15 days ago

Funny thing about Microsoft is they don't add lockout policies by default to certain 'Built in accounts' ;p