Forum Discussion
Solved
Kate's Story: Ep.2 – Exploitation - Question 9
When replacing the calc.exe instances with the mshta.exe payload provided in the briefing I am wondering about where I am getting wrong
Nevermind, for some reason after resetting the lab, only one calc.exe was observed. changing just one instance of it with the payload got me the token
2 Replies
- SamDickison
Community Manager
Hey kevinh, I'll see if anyone on the Community can pick this up and if not I'll ask the team for a hint. Sadly I have no idea, myself 😅
Nevermind, for some reason after resetting the lab, only one calc.exe was observed. changing just one instance of it with the payload got me the token
