Support - HTB [Discussion]
by - Thursday, January 1, 1970 at 12:00 AM
Has it worked for someone? I have tried without success
Reply
(July 30, 2022, 11:53 PM)11231123 Wrote:
(July 30, 2022, 11:51 PM)farkow Wrote:
(July 30, 2022, 11:42 PM)rubymurakami Wrote: if you are following along with the guide make sure to import the two modules that are referenced


Ah not them, somehow default Powershell modules are not recognized.

For example:
Get-DomainObject -Identity "dc=support,dc=local" -Domain support.local
Get-DomainObject : The term 'Get-DomainObject' is not recognized as the name of a cmdlet, function, script file, or operable program.


Get the PowerView and Powermad.



I'm using winrm as a shell but the commands are not working any help
Reply
All steps and tickets were successful for me, but psexec part is failing.
When I send a command instead of a shell, I see Unauthorized Access.
Going to recheck the guide.

Even, I can see the ticket in klist results.
Probably something funny, checking...
Reply
(July 31, 2022, 12:25 AM)JINXX Wrote:
(July 30, 2022, 11:53 PM)11231123 Wrote:
(July 30, 2022, 11:51 PM)farkow Wrote:
(July 30, 2022, 11:42 PM)rubymurakami Wrote: if you are following along with the guide make sure to import the two modules that are referenced


Ah not them, somehow default Powershell modules are not recognized.

For example:
Get-DomainObject -Identity "dc=support,dc=local" -Domain support.local
Get-DomainObject : The term 'Get-DomainObject' is not recognized as the name of a cmdlet, function, script file, or operable program.


Get the PowerView and Powermad.



I'm using winrm as a shell but the commands are not working any help


must be the modules if you could show the error message that could allow us to help you
Reply
I have problems at this point, maybe I'm doing something wrong

(New-Object Security.AccessControl.RawSecurityDescriptor -ArgumentList $RawBytes, 0).DiscretionaryAcl
Reply
(July 31, 2022, 01:11 AM)quick443 Wrote: I have problems at this point, maybe I'm doing something wrong

(New-Object Security.AccessControl.RawSecurityDescriptor -ArgumentList $RawBytes, 0).DiscretionaryAcl


That is just to see how raw security descriptor is parsed and confirm it is correct. Does not have an effect. But if you still want to see it run it as:

(New-Object Security.AccessControl.RawSecurityDescriptor -ArgumentList $SDBytes, 0).DiscretionaryAcl

Reply
nothing, it does not go, maybe we are wasting time
Reply
yes, i tried several ways here but the shell ends up crashing
Reply
no its the path
Reply
(July 31, 2022, 02:27 AM)yumi Wrote: no its the path


did you end up getting it to work?
Reply


 Users viewing this thread: Support - HTB [Discussion]: No users currently viewing.