Archetype
Last updated
Last updated
Which TCP port is hosting a database server?
Answer: 1433
What is the name of the non-Administrative share available over SMB?
Answer: backups
What is the password identified in the file on the SMB share?
Answer: M3g4c0rp123
What script from Impacket collection can be used in order to establish an authenticated connection to a Microsoft SQL Server?
Answer: mssqlclient.py
What extended stored procedure of Microsoft SQL Server can be used in order to spawn a Windows command shell?
Answer:xp_cmdshell
What script can be used in order to search possible paths to escalate privileges on Windows hosts? PEASS Github Answer: winpeas
What file contains the administrator's password?
Answer: ConsoleHost_History.txt
Submit user flag
Answer: 3e7b102e78218e935bf3f4951fec21a3
Submit root flag
Administrator Password: MEGACORP_4dm1n!!
Answer: b91ccec3305e98240082d4474b848528
