HTB Axlle - Writeup
by macavitysworld - Sunday June 23, 2024 at 09:05 AM
#31
Hi everybody. No need your own SMB server. Need:
1. file xx.hta with "powershell3base64" payload from revshells.com - upload to victim's folder C:\Users\Public
2. file xx.url with content:
[InternetShortcut] URL=C:\Users\Public\xx.hta
This file upload to victim's C:\inetpub\testing
3. Before above open http server and listener on your machine, wait 2-3 seconds
4. You''ll get shell as dallon.matrix
#32
(07-01-2024, 01:52 AM)monkeyNo1 Wrote: Hi everybody. No need your own SMB server. Need:
1. file xx.hta with "powershell3base64" payload from revshells.com - upload to victim's folder C:\Users\Public
2. file xx.url with content:
   
    [InternetShortcut]     URL=C:\Users\Public\xx.hta    
    This file upload to victim's C:\inetpub\testing
3. Before above open http server and listener on your machine, wait 2-3 seconds
4. You''ll get shell as dallon.matrix

Oh nice. I did actually try this but from a different directory and it didn't work for me. Must have been a permission issue. I also spent a ton of time trying to serve it with SMB to no avail. Eventually I got it with SMB
#33
thanks for sharing


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 365 113,351 08-28-2026, 07:30 PM
Last Post: N1GHTC0D3
  HTB Eloquia User and Root Flags - Insane Box 69646B 14 17,621 08-21-2026, 07:27 PM
Last Post: tangol
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 94 26,235 08-21-2026, 06:20 AM
Last Post: jamoski
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 25 19,509 08-15-2026, 06:06 PM
Last Post: m4573rx
  [FREE] HackTheBox Dante - complete writeup written by Tamarisk Tamarisk 603 118,039 08-15-2026, 06:00 PM
Last Post: zl4



 Users browsing this thread: 1 Guest(s)