Forum Discussion

Dark_Knight666's avatar
Dark_Knight666
Icon for Bronze III rankBronze III
21 days ago
Solved

Privilege Escalation: Windows – Unquoted Service Paths

Hello,

I was wondering if someone could please guide me as to why I'm not able to create a payload as advised by Q9 in order for me to transfer it to my Windows instance? 

I feel I have done what is required but not sure what I may be doing incorrectly? 

 

 

  • OK.  If you're running your web server from /home/kali/Desktop/Tools/Windows then that will be the base directory when you open the browser on the Windows machine.  If your payload isn't there then you won't see it.

    Your payload has most likely been saved to /home/kali/ 

    Option 1: Save/copy your payload to the /home/kali/Desktop/Tools/Windows directory
    Option 2: Keep payload where it is and spin up your web server from /home/kali

    Either one of these should sort you out.

3 Replies

  • Don't be put off by the messages, they are just saying that you didn't specify a platform, architecture or encoding.  Your payload has been generated, as indicated by the final file size.

    • Dark_Knight666's avatar
      Dark_Knight666
      Icon for Bronze III rankBronze III

      barney​ - Thank you! However I'm a little confused as to how to transfer the daily.exe onto the Windows instance? Using the instructions below which are found on a previous lab, tell me how to move a particular folder which was 'Tools' in the Windows instance but a little confused as to how to move the daily.exe onto it? 

       

       

  • OK.  If you're running your web server from /home/kali/Desktop/Tools/Windows then that will be the base directory when you open the browser on the Windows machine.  If your payload isn't there then you won't see it.

    Your payload has most likely been saved to /home/kali/ 

    Option 1: Save/copy your payload to the /home/kali/Desktop/Tools/Windows directory
    Option 2: Keep payload where it is and spin up your web server from /home/kali

    Either one of these should sort you out.