Knowledge Hub

Archetype

Hack The Box9 answered prompts

Archetype Hack The Box walkthrough with 9 answered prompts and lab methodology notes.

Prompts and answers

  • Which TCP port is hosting a database server?
    1433
  • smbclient -N -L will list shares. Administrative shares end in $.
    backups
  • What is the password identified in the file on the SMB share?
    M3g4c0rp123
  • Impacket examples can always help. Search for one related to the mssql.
    mssqlclient.py
  • Pentesting cheatsheets for Microsoft SQL Server will definitely help. Also a "Transact sql shell for Microsoft SQL Server" search in Google will bring useful results.
    xp_cmdshell
  • What script can be used in order to search possible paths to escalate privileges on Windows hosts?
    winpeas
  • What file contains the administrator's password?
    ConsoleHost_history.txt
  • Submit user flag
    3e7b102e78218e935bf3f4951fec21a3
  • Submit root flag
    b91ccec3305e98240082d4474b848528