Open the link, according to the task presenting, flag in the c root directory, connected off a background page, open the c drive, find the existence of flag.txt, but that it does not have permission.
So we need to know this off the right to be mentioned operations, open the D drive, find cmd.exe and iis6.exe (if not you can upload), aware of the need to operate with the Windows system, then turn on the virtual machine windows 7, but still not open this program, originally jre environment is not installed, then go to the official website at the latest java version of the jre, win7 can execute jre program, but the operation plate background d cmd.exe or an error occurred. This time scalp a little numb, do not know how to run, then repeated testing, the errors are the same, do not open exe win7 it? Later, I go online to re-download a cknife.
The terminal can be found, the effort pays off.
First, try to add a user, net user mac mac /adddisplay insufficient permissions.
Iis6.exe do not think there is, they cd UploadFilesenter, to be iis6 whoamioperation.
I say give permission to a local system in the second line, I believe, begin to create useriis6.exe "net user mac mac /add"
After the user has been created for mac is logged-on user given administrator privileges. iis6.exe "net localgroup Administrators mac /add"
And then view the mac user permissions have been found to be the administrator.
After that you can log on remotely, but found a login error, and then continue to look for the cause.
I think of the IP address is wrong, there will not be a port problem? In the D drive input terminal tasklist -svc, a remote desktop that is found TermService process number is 2460.
Continue entering netstat -anoviewing port and connection status. PID find connections to TCP 2460 and found it open port 3389.
It puts the remote desktop connection port to 3389, a user named mac, I thought everything will be fine after you have finished entering the account password in a remote desktop when the result has prompted: Terminal Server connections exceeds the maximum number allowed. See this mentality a little collapse, but still under control, they search for answers in csdn, the results of the solution are to go to set up the server. White out for a long time, and then go to Baidu search Why would exceed the maximum allowable number of connections, know that the run did not last user exits that led to this.
I then use its solutions, forced to log Remote Desktop mstsc /admin, Remote Desktop login is successful, find the C drive, to get the flag.
Summary: The clearance required for the user to mention the right, there have been many headaches in practice, but then have been resolved, Baidu helped a lot of help, thanks!
