Hack the Box is an online platform to test and advance your skills in penetration testing and cyber security.
In this series of articles we will show how junior evaluators complete some Hack The Box machines in their road to OSCP, a well-known, respected, and required for many top cybersecurity positions certification. Certified OSCPs are able to identify existing vulnerabilities and execute organized attacks in a controlled and focused manner. They can leverage or modify existing exploit code to their advantage, perform network pivoting and data exfiltration, and compromise systems due to poor configurations.
Let's start with the fun!
Legacy
Initial Foothold
When scanning, for some reason I had to use -Pn, otherwise nmap complained about the host being
down.
We see that it's Windows XP running SMB. Googling about that find a metasploit module for Windows XP
SP3: exploit/windows/smb/ms08_067_netapi
It works, we get a shell.
User
Navigate to C:\Documents and Settings\john\Desktop> for the user.txt.
Root
Navigate to C:\Documents and Settings\Administrator\Desktop> for the root.txt.
