CHALLENGE INFORMATION

Platform: TryHackMe
Path: Complete Beginner
Module: Windows Exploitation Basics
Room: Metasploit: Meterpreter
Description: Take a deep dive into Meterpreter, and see how in-memory payloads can be used for post-exploitation.

Introduction to Meterpreter

Question 1: No answer needed

No answer needed

Meterpreter Flavors

Question 1: No answer needed

No answer needed

Meterpreter Commands

Question 1: No answer needed

No answer needed

Post-Exploitation with Meterpreter

Question 1: No answer needed

No answer needed

Post-Exploitation Challenge

Question 1: What is the computer name?

ACME-TEST

Question 2: What is the target domain?

FLASH

Question 3: What is the name of the share likely created by the user?

speedster

Question 4: What is the NTLM hash of the jchambers user?

69596c7aa1e8daee17f8e78870e25a5c

Question 5: What is the cleartext password of the jchambers user?

Trustno1

Question 6: Where is the secrets.txt file located? (Full path of the file)

c:\Program Files (x86)\Windows Multimedia Platform\secrets.txt

Question 7: What is the Twitter password revealed in the secrets.txt file?

KDSvbsw3849!

Question 8: Where is the realsecret.txt file located? (Full path of the file)

c:\inetpub\wwwroot\realsecret.txt

Question 9: What is the real secret?

The Flash is the fastest man alive