Posts: 24
Threads: 2
Joined: Jun 2024
Mar 16, 2025, 10:34 AM
(This post was last modified: Mar 16, 2025, 10:36 AM by wh1t3_r4bb1t.)
This box rating is 2.4 and I understand why. It works like a shit, sometime you can login, sometimes not. Default windows shitty lagging stuff. Even port forwarding for ssh does not allow you to connect via ssh.
Yesterday Runas says to me that I am webservice after using f.frizzle creds. And today it says "RunasCsException: The username 'f.frizzle' has not been found."
Good luck for everyone, but I will finish this box to rate it as 1 star.
Posts: 7
Threads: 1
Joined: Aug 2024
(Mar 16, 2025, 10:34 AM)wh1t3_r4bb1t Wrote: This box rating is 2.4 and I understand why. It works like a shit, sometime you can login, sometimes not. Default windows shitty lagging stuff. Even port forwarding for ssh does not allow you to connect via ssh.
Yesterday Runas says to me that I am webservice after using f.frizzle creds. And today it says "RunasCsException: The username 'f.frizzle' has not been found."
Good luck for everyone, but I will finish this box to rate it as 1 star.
Same happened with me..
Posts: 48
Threads: 3
Joined: Jan 2025
Shitty box, even after reset WinRM is not enabled and ssh also not working anymore...
Posts: 17
Threads: 0
Joined: Jan 2025
I'm now trying to get the files out of the recycle bin to no avail, plus the winrm being total shite
Posts: 24
Threads: 2
Joined: Jun 2024
Mar 16, 2025, 01:06 PM
(This post was last modified: Mar 16, 2025, 01:16 PM by wh1t3_r4bb1t.)
WTF is wrong with this box. Now 'net localgroup Administrators' says I'm in administrator group, mimikatz token::elevate says I have NT AUTHORITY\SYSTEM token, but I still can not get access to any admin sources.
I believe it can be UAC issue.
Posts: 1
Threads: 0
Joined: Feb 2025
The time on this box is silly.
Posts: 48
Threads: 3
Joined: Jan 2025
(Mar 16, 2025, 01:06 PM)wh1t3_r4bb1t Wrote: WTF is wrong with this box. Now 'net localgroup Administrators' says I'm in administrator group, mimikatz token::elevate says I have NT AUTHORITY\SYSTEM token, but I still can not get access to any admin sources.
I believe it can be UAC issue.
If you're in as local admin, upload RunasCs.exe and use the following command to get the flag:
.\RunasCs.exe "user" "pass" "cmd /c type C:\Users\Administrator\Desktop\root.txt" --bypass-uac --logon-type '8' --force-profile
with correct user and pass...
Posts: 44
Threads: 1
Joined: Oct 2023
Mar 16, 2025, 01:36 PM
(This post was last modified: Mar 16, 2025, 01:37 PM by BFischer.)
Why this Evil-WinRM shell v3.7
Warning: Remote path completions is disabled due to ruby limitation: quoting_detection_proc() function is unimplemented on this machine
Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winr...completion
Warning: Useless cert/s provided, SSL is not enabled
Info: Establishing connection to remote endpoint
Error: An error of type HTTPClient::ConnectTimeoutError happened, message is execution expired
Error: Exiting with code 1
This box is wierd looks like they didn't test it before release
Posts: 48
Threads: 3
Joined: Jan 2025
(Mar 16, 2025, 01:36 PM)BFischer Wrote: Why this Evil-WinRM shell v3.7
Warning: Remote path completions is disabled due to ruby limitation: quoting_detection_proc() function is unimplemented on this machine
Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winr...completion
Warning: Useless cert/s provided, SSL is not enabled
Info: Establishing connection to remote endpoint
Error: An error of type HTTPClient::ConnectTimeoutError happened, message is execution expired
Error: Exiting with code 1
This box is wierd looks like they didn't test it before release
WinRM is not needed, a Windows powershell is also running on the SSH port. But I agree, even SSH is rather unstable.
Posts: 2
Threads: 0
Joined: Jun 2024
ssh for f.* works for me but not with m.*
|
