After having made sure everything worked in his demo site, n3m0 issued the sql injection and uploaded his nomad.asp script. For n3m0 the results were like hearing a beautiful song.<\/p>\n
C:\\WINDOWS\\System32<\/p>\n
0wned<\/span>, the feeling still made n3m0 feel giggly, though this time it might have been because of lack of sleep. After penetrating the walls his focus went on to control. n3m0 began documenting the network, it had three servers. One Exchange server running IIS with OWA, this was the server he had first gained access to through the ShowRoom.Asp application. The second server was a Domain Controller which also acted as a file and print server. n3m0 chose the third server to host the website, it was a Windows Server 2003 box acting as a Terminal Server.<\/p>\n The server had 3 Gb of RAM, two 73 Gb SCSI disks set up in a RAID 1 mirror, only 13 Gb were used. Perfect<\/span>, n3m0 found a suitable directory where his client would place the files and verified that the directory wasn’t part of any backup selection.<\/p>\n Regal-Pens used a firewall with a web interface, n3m0 was able to gain access with the help of a default password list. Later he also found the password in a text file located in kdonovan’s home directory; kdonovan was a member of the Domain Admins group which had prompted him to take a look. n3m0 opened up a random port for the web access and one to manage the server.<\/p>\n After some cleanup work he bid the network farewell and closed his connections.<\/p>\n Two days later the phone rang again.<\/p>\n “Hello” n3m0 answered. [tags]security, stories, fiction[\/tags]<\/p>\n","protected":false},"excerpt":{"rendered":" After having made sure everything worked in his demo site, n3m0 issued the sql injection and uploaded his nomad.asp script. For n3m0 the results were like hearing a beautiful song. C:\\WINDOWS\\System32 0wned, the feeling still made n3m0 feel giggly, though this time it might have been because of lack of sleep. After penetrating the walls […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":""},"categories":[2],"tags":[],"_links":{"self":[{"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/posts\/21"}],"collection":[{"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/comments?post=21"}],"version-history":[{"count":0,"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/posts\/21\/revisions"}],"wp:attachment":[{"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/media?parent=21"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/categories?post=21"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/ogenstad.net\/wp-json\/wp\/v2\/tags?post=21"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n“Why hello there,” said the distorted voice, “how are things progressing?”
\n“It’s done” n3m0 said.
\n“Excellent! What a good boy you are.”
\n“Uhm, what? Yes, I’m pretty good. So when will I get paid?”
\n“How do you want to transfer the money?”
\n“What, you’re not going to give them to me personally?” n3m0 asked.
\n“That’s not likely to happen, no.” The caller didn’t sound impressed.
\n“You don’t by any chance play online poker?”
\n“I guess I could learn.” n3m0 smiled.<\/p>\n