TryHackMe - Alfred - Hacking Walkthrough

Back again, with another Windows machine exploitation. This time on a Batman inspired machine with Jenkins running on a web-server. Where we have to send PowerShell commands to get a reverse shell and eventually impersonate as Administrator to get escalated shell. Thanks for watching! Don't forget to 'Like' & 'Subscribe', I will truly appreciate the support.

*****Don't just watch Me!*****

*****Follow me on Twitter!*****

[ViolentbyDesign]

Dude I watch you all the time for some reason today I wasn’t subscribed to you and it undid the like i had put on this video the other day

[elsewrld]

I know it’s like 5 months too late, but big thanks! The writeups on this one were not helping and you made it very clear. In the end, I think I was just overthinking and overcomplicating it lol. Also, it is fine now because I AM HERE!

[thanoscar]

Very nice man thank you for your help and guidance !!! thanks to you I was able to complete the room, really got stuck during the part that we are suppose to switch the shells :v

[zzsql]

Toshinori is a male Japanese name given to notable people. See the wiki article on the name. It's an honorable distinction title.

[rangersmyth]

Toshinori Yagi ( 八 ( や ) 木 ( ぎ ) 俊 ( とし ) 典 ( のり ), Yagi Toshinori), more commonly known by his hero name, All Might (オールマイト, Ōru Maito),

[b.aizman]

Alfred seems to be broken for me atm. It's impossible for me to execute the Invoke-PowerShellTcp but I get a 200 from the server so it catches it but never executes it so I can't get the inital shell. Happens on my kali box, the parrot attackbox and the kali attack box. First I thought I was doing something wrong somewhere and then started looking for write ups and I've been doing the same thing and even follow yours step by step and a few other written ones but it just won't work.

Just putting it out there if someone else find it to be impossible to get the inital shell.

[PreetisKitchenltr]

Can you please tell what terminal you use? It looks different from normal bash terminal. Please tell 🙏

[kalubdailey]

this is great but you totally just skip over the question about the size of the payload, assuming everyone already knows how to find that out.

[mayhem]

doesnt work when i try to run the server says python line error 193 should i just fix the code line erros my self

[nirmitshah]

Awesome walkthrough can you share some tips for windows box privesc?

[zzsql]

PS It's pronounced 'meh terp reter', not 'meeter preeter' lol.

[mujkicsamir]

How to go on opt/nishang/ ?
When I wanna go there I cant find a nishang