[oyfyic]

How to get user flag???

[fr34cker]

user flag free:

evil-winrm -i haze.htb -u 'edward.martin' -H '09e0b3eeb2e7a6b0d419e9ff8f4d91af'

[tony_boom23]

user flag free:

evil-winrm -i haze.htb -u 'edward.martin' -H '09e0b3eeb2e7a6b0d419e9ff8f4d91af'

Thank you very much!
Does anyone know how to get root\administrator flag ?

[maggi]

https://github.com/0xjpuff/reverse_shell_splunk

Then throw a potato at the box

[kyakeiuwu]

https://github.com/0xjpuff/reverse_shell_splunk

Then throw a potato at the box

bro is onto something for sure

[zippo99]

https://github.com/0xjpuff/reverse_shell_splunk

Then throw a potato at the box

yeah thats what I wanted to do, but how do you log into splunk? We don't have credentials that allow us to log in. We can only get the "Ld@p_Auth..." one from exploiting the LFI CVE. can't log into splunk with that one.

[rootme1122]

https://github.com/0xjpuff/reverse_shell_splunk

Then throw a potato at the box

yeah thats what I wanted to do, but how do you log into splunk? We don't have credentials that allow us to log in. We can only get the "Ld@p_Auth..." one from exploiting the LFI CVE. can't log into splunk with that one.

admin
Sp1unkadmin@2k24

[dimly5252]

https://github.com/0xjpuff/reverse_shell_splunk

Then throw a potato at the box

yeah thats what I wanted to do, but how do you log into splunk? We don't have credentials that allow us to log in. We can only get the "Ld@p_Auth..." one from exploiting the LFI CVE. can't log into splunk with that one.

admin
Sp1unkadmin@2k24

How were you able to crack the admin hash?

---

user flag free:

evil-winrm -i haze.htb -u 'edward.martin' -H '09e0b3eeb2e7a6b0d419e9ff8f4d91af'

How were you able to get the hash for this user? I was only able to get the username by using evil-winrm on mark.adams and looking around there.

[zippo99]

https://github.com/0xjpuff/reverse_shell_splunk

Then throw a potato at the box

yeah thats what I wanted to do, but how do you log into splunk? We don't have credentials that allow us to log in. We can only get the "Ld@p_Auth..." one from exploiting the LFI CVE. can't log into splunk with that one.

admin
Sp1unkadmin@2k24

that's awesome! where did you find that password?

[maggi]

https://github.com/0xjpuff/reverse_shell_splunk

Then throw a potato at the box

yeah thats what I wanted to do, but how do you log into splunk? We don't have credentials that allow us to log in. We can only get the "Ld@p_Auth..." one from exploiting the LFI CVE. can't log into splunk with that one.

admin
Sp1unkadmin@2k24

that's awesome! where did you find that password?

 Check Backups or Splunk...something related might stand out