Object_home_directory_oliver

smith

---

Checking for the home directory of the oliver user after performing basic enumeration

*evil-winrm* ps c:\Users\oliver> tree /F /A
Folder PATH listing
Volume serial number is 212C-60B7
c:.
+---.groovy
|   \---grapes
+---3D Objects
+---Contacts
+---Desktop
|       user.txt
|
+---Documents
+---Downloads
+---Favorites
|   |   Bing.url
|   |
|   \---Links
+---Links
|       Desktop.lnk
|       Downloads.lnk
|
+---Music
+---Pictures
+---Saved Games
+---Searches
\---Videos

There appears to be pretty much nothing in the home directory of the oliver user I will check the AppData directory

Local

---

*Evil-WinRM* PS C:\Users\oliver\AppData\Local> dir
 
 
    Directory: C:\Users\oliver\AppData\Local
 
 
Mode                LastWriteTime         Length Name
----                -------------         ------ ----
d-----       10/20/2021   9:55 PM                ConnectedDevicesPlatform
d-----        9/20/2023   8:08 AM                DBG
d-----       10/22/2021   7:38 AM                Jenkins
d-----       10/21/2021   3:41 AM                Microsoft
d-----       10/20/2021   9:56 PM                Packages
d-----        9/20/2023   2:27 AM                PeerDistRepub
d-----        9/20/2023  10:07 AM                Temp
d-----       10/20/2021   9:56 PM                VirtualStore

Nothing else except for the already-enumerated Jenkins directory

LocalLow

---

*evil-winrm* ps c:\Users\oliver\AppData\Local> cd ../LocalLow
*evil-winrm* ps c:\Users\oliver\AppData\LocalLow> tree /F /A
Folder PATH listing
Volume serial number is 212C-60B7
c:.
No subfolders exist

Roaming

---

*Evil-WinRM* PS C:\Users\oliver\AppData\LocalLow> cd ../Roaming ; tree /F /A
Folder PATH listing
Volume serial number is 212C-60B7
C:.
\---Adobe
    \---Flash Player
        \---NativeCache