[Aner]

Hi,
after Tightened MSSQL Permissions i had some problems for get root flag ... here how i solved them.

Hidden Content

You must register or login to view this content.

[kewlcat002]

florence user does not have access to that portal

[Aner]

florence user does not have access to that portal

Yes, only administrator...you need crack  SAML (Security Assertion Markup Language) . If you inspect the url It indicates that the login process involves SAML. For that you need ADFS_GMSA$'s account. I wrote the html response to forward for have access to web app.

[Detector6]

how do we find florence user password after patch? do we need it?

prior to patch, seems password was in florence user docker container /docker-entrypoint accessed via intranet box shell.

[armagedo90]

Hi,
after Tightened MSSQL Permissions i had some problems for get root flag ... here how i solved them.

how do we find the florence user's password after the patch? do we need it?
I also have this problem

[Aner]

Yes .. because with florence you can find NTL HASH of Justin

---

how do we find florence user password after patch? do we need it?

prior to patch, seems password was in florence user docker container /docker-entrypoint accessed via intranet box shell.

florence.ramirez -P uxLmt*udNc6t3HrF

[armagedo90]

Hi,
after Tightened MSSQL Permissions i had some problems for get root flag ... here how i solved them.

I got stuck on the mssql patch?

[xssl4b]

Hi,
after Tightened MSSQL Permissions i had some problems for get root flag ... here how i solved them.

ty bro, root was giving me a lot of errors, not to mention that it is more complicated without easy root

[0xb043]

This is interesting really

[noter]

user is still the same, root is a challenge