Forum Discussion
sidi7
Bronze I
Bronze IPoshC2: Ep.6 – Demonstrate Your Skills
Hi everyone I am stuck on question 8: Run a privilege escalation enumeration module. What is the Administrator password? I already tried most of the privesc modules like invoke-allchecks, hashdump ...
👋 sidi7
You've mentioned that you've already tried the Invoke-AllChecks module - I'd have another look at the output from that module, as one of the files it checks for (and finds) contains a plain-text password. You shouldn't need to do any hash-cracking or use any external tools to find the password!
Samh051
Bronze II
Bronze III'm having problems with the Invoke-AllChecks module. Each time i run it i get an error, sometimes "Cannot bind argument to parameter PATH because it is an empty string" or "Access to path C:\Windows\system32\rundll32.exe is denied"
From the output it does give me before the error, i cannot see any administrator password.
