Persistence: Accessibility Features - missing token.txt
On Persistence: Accessibility Features > Infrastructure Hacking lab I have successfully answered all but the last question in the lab.
I have cmd.exe running as magnify from the lock screen. The last question is "Use the command prompt to read the token in C:\Users\Administrator\token.txt."
However when browsing to this directory, there is no token.txt (not even hidden) nor any file called that when searching the entire disk.
Does anyone know how to find this file please?
Today
I've just ran the lab start to finish and token.txt is there.
You've already used "takeown" of magnify.exe, followed by icacls /grant. Finally "cp cmd.exe Magnify.exe".
And youve answered the whoami command.
If system its all correct and just a simple: type C:\Users\Administrator\token.txt from the cmd.
I didnt browse to the directory just ran the command. If it doesnt pop up the first time a reset is normally the win.
In short, turn it off and back on again.