Devel (Windows)

Nmap Scan Results 

21/tcp open  ftp     Microsoft ftpd
| ftp-syst: 
|_  SYST: Windows_NT
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| 03-18-17  01:06AM       <DIR>          aspnet_client
| 03-17-17  04:37PM                  689 iisstart.htm
|_03-17-17  04:37PM               184946 welcome.png
80/tcp open  http    Microsoft IIS httpd 7.5
| http-methods: 
|_  Potentially risky methods: TRACE
|_http-title: IIS7
|_http-server-header: Microsoft-IIS/7.5
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Anonymous login is enabled on ftp. Logged in successfully.

Upload a shell after creating a aspx file with msfvenom

Upload it with put

run sysinfo, background the session and

use suggester

Used the kitrapod and successfully rooted it.

PreviousHTB: Valentine (Linux) Write-up Exploiting heartbleed/finding juicy bash hisotory & dirtycow for PENextNibbles (Linux) Write-up - LinEnum & How to call a bash shell with sudo priv

Last updated