Forum Discussion
Dark_Knight666
Silver I
Silver ITrick or Treat on Specter Street: Ghost of the SOC
Hi there, Am I right as obvious that it may seem that for me to login to Kibana, I need to access this through the Elastic IP address that I have entered in my browser? If so I'm getting the error m...
Samh051
Bronze III
Bronze IIIIts tricky. The svc account password is stored plain text in a file somewhere.
Try look for something on the machine which looks a little out of place, then go deeper.
ThreatWhisperer
Bronze II
Bronze IIAh, that was easy, thx!
Now I've got the password, and I can e.g. use it to disable that account, but it doesn't seem to be enough to remove the persistence :-(
Edit: Never mind, I found another thread here discussing the same lab with the right hint to proceed!
