Forum Discussion

Today's avatar
Today
Icon for Bronze I rankBronze I
3 months ago

Persistence: Accessibility Features - missing token.txt

On Persistence: Accessibility Features > Infrastructure Hacking lab I have successfully answered all but the last question in the lab. 

I have cmd.exe running as magnify from the lock screen. The last question is "Use the command prompt to read the token in C:\Users\Administrator\token.txt." 

However when browsing to this directory, there is no token.txt (not even hidden) nor any file called that when searching the entire disk. 

Does anyone know how to find this file please? 

  • Today

    I've just ran the lab start to finish and token.txt is there.

    You've already used "takeown" of magnify.exe, followed by icacls /grant. Finally "cp cmd.exe Magnify.exe". 

    And youve answered the whoami command. 

    If system its all correct and just a simple: type C:\Users\Administrator\token.txt from the cmd.

    I didnt browse to the directory just ran the command. If it doesnt pop up the first time a reset is normally the win.

    In short, turn it off and back on again.

  • Today

    I've just ran the lab start to finish and token.txt is there.

    You've already used "takeown" of magnify.exe, followed by icacls /grant. Finally "cp cmd.exe Magnify.exe". 

    And youve answered the whoami command. 

    If system its all correct and just a simple: type C:\Users\Administrator\token.txt from the cmd.

    I didnt browse to the directory just ran the command. If it doesnt pop up the first time a reset is normally the win.

    In short, turn it off and back on again.

  • I reset the lab and redid all the steps exactly the same and it popped up! 

  • TillyCorless's avatar
    TillyCorless
    Icon for Community Manager rankCommunity Manager

    Hi Today 

    Welcome to The Human Connection! Please can you provide some detail of the steps you have already taken so that your fellow community members are able to assist you?