[Unbutton8074]

btw emily password can be cracked using hashcat

hashcat -a 0 -m 10900 hash.txt rockyou.txt

just convert salt and pwd from hex to b64

[jsvensson]

Does enyone found something on Emily to root?

---

It looks like this could be the way:
https://www.mdsec.co.uk/2024/01/cve-2024...0-service/

[4rrows]

Does enyone found something on Emily to root?

---

It looks like this could be the way:
https://www.mdsec.co.uk/2024/01/cve-2024...0-service/

I also think so, am following the steps now

[breachhacks9]

Any success at privilege escalation?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Accusing forum user of being a fraudster without making any deal

[Test12349]

Does enyone found something on Emily to root?

---

It looks like this could be the way:
https://www.mdsec.co.uk/2024/01/cve-2024...0-service/

This is the way. The public PoC needs 2 edits, one for path and one for payload.

[jsvensson]

Does enyone found something on Emily to root?

---

It looks like this could be the way:
https://www.mdsec.co.uk/2024/01/cve-2024...0-service/

This is the way. The public PoC needs 2 edits, one for path and one for payload.

What path should be changed?

[breachhacks9]

Does enyone found something on Emily to root?

---

It looks like this could be the way:
https://www.mdsec.co.uk/2024/01/cve-2024...0-service/

This is the way. The public PoC needs 2 edits, one for path and one for payload.

Thanks bro/./.......

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Accusing forum user of being a fraudster without making any deal

[4rrows]

Does enyone found something on Emily to root?

---

It looks like this could be the way:
https://www.mdsec.co.uk/2024/01/cve-2024...0-service/

This is the way. The public PoC needs 2 edits, one for path and one for payload.

If you don't mind can you share the link to the PoC

[breachhacks9]

I can't query services???
```
*Evil-WinRM* PS C:\Users\Emily\Desktop> Get-Service
Cannot open Service Control Manager on computer '.'. This operation might require other privileges.
At line:1 char:1
+ Get-Service
+ ~~~~~~~~~~~
+ CategoryInfo : NotSpecified: ( [Get-Service], InvalidOperationException
+ FullyQualifiedErrorId : System.InvalidOperationException,Microsoft.PowerShell.Commands.GetServiceCommand
```

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Accusing forum user of being a fraudster without making any deal

[Test12349]

Does enyone found something on Emily to root?

---

It looks like this could be the way:
https://www.mdsec.co.uk/2024/01/cve-2024...0-service/

This is the way. The public PoC needs 2 edits, one for path and one for payload.

What path should be changed?

https://github.com/Wh04m1001/CVE-2024-20656

You have to update cmd[] to match what's on the system. And the path in cb1() for the payload.