TryHackMe - Steel Mountain - Hacking Walkthrough

Hack your way through Steel Mountain, not as cool as when Elliot did it, but we can imagine, right ? A Mr.Robot themed Windows Server, which provides privilege escalation both manually and through Metasploit. This box was truly a blast, I just wish I could have done it first with you all! Hope you enjoy!

****Don't just watch Me!*****

*****Follow me on Twitter!*****

[nadavdvash]

Thank you!! one of the best walktroughs ive seen. that little add user at the end was so neat and simple

[EHustleEntertainment]

Thanks for the walkthrough, I would not have made it through without you, I took notes

[ellerionsnow]

On the manual exploit part, does the webserver have to be on port 80? I have a web server running already and was hoping to do the call back to a different port, but in the exploit I don't see where it specifies port 80.

[CybrTechGuy]

After I upload the ASCService file, I can't restart the service. I just get an "[SC] StartService FAILED 1053: The service did not respond to the start or control request in a timely fashion." I can't figure out where I went wrong. I checked, double checked, triple checked the msfvenom command. Verified upload, verified copy, and verified the service was stopped.

[laureanocavallo]

Perfect example of what a Walkthrough should be, with all the ocurrences that may happend (like lagging when you tab the "set payload windows/..."), it happend exactly the same to me.
Thanks!

[danielv]

Thanks for the walkthru. It helps a lot.!

[robertlean]

at 8.45 what do you mean upload from the directory that you have powerup???? do you have it by default????
(you didn't show the part where you downloaded it if you did it)

[pwnd_drt]

Good videos dude, liked and subscribed!

[Sam-uxrw]

Anyone know why I never get a response from the python simple httpserver ? The server is up serving on my tun0 IP address for the THM vpn and I can view the files in a browser, but when I run the python file exactly how is done in this video I get no response from the http server. I think this happens in other situations I've tried to do similar things..

[dropcake]

Thanks for this video! I was messing up on the msfvenom creation and upload part -> I was putting in the wrong IP address in the msfvenom command and just generally screwing up the upload and overwrite lol. Thanks again! Great video!

Side note -> I saw that you're a SOC Engineer on your website. I have an interview for a Red Team Operator position with JPMorgan on Tuesday. Do you have tips for the interview that I could use? Thanks again for your help and this video.

[hamu.u]

Thank you for the video. Do you think you would ever do hack the box videos?

[swordfishinc]

wondering if the lab has been updated. I cannot replace ASCService.exe, no rights to do so. I can copy the payload to IObits/Advanced.exe and then execute the "space" in the path exploit. by restarting the service.

[ohmatokito]

Thanks for video. I learned powershell -c and wget . THM's machines is not stabil always connection lost or not exploitable and later try again exploitable!

[danghost]

Awesome content my friend gave that like for the support ❤️👍🏻😎

[ericwenzel]

i cant catch the shell with nc. I do receive a connection but after some time target says: "The service did not respond to the start or control request in a timely fashion." and nc listener closes. With the msf muti handler it works fine. Any ideas ?

[giovannitomczak]

I keep getting the following error: "The service did not respond to the start or control request in a timely fashion" after trying to restart the service with the msfvenom shell. Have been stuck on this part for a while now. Any tips?

[okb]

Hey, great video! And don't listen to anyone, say meterpreter how you want :P

[toxic_sorry_]

Hi. When i try to exploit the Rejetto remote command execution on metasploit, it says "Exploit Completed but no session was created".

[jjjww]

use net stop or net start ... sc did not work for me

[canberkefe]

Great video thx!
You should speak louder