Beyond
This is the beyond page that an additional post enumeration and assessment are conducted as SYSTEM after compromising the target system.
H2 Configuration
PS C:\Program Files (x86)\H2\service> cat wrapper.conf
#********************************************************************
# Wrapper Properties
#********************************************************************
# Java Application
wrapper.java.command=java
# Java Main class. This class must implement the WrapperListener interface
# or guarantee that the WrapperManager class is initialized. Helper
# classes are provided to do this for you. See the Integration section
# of the documentation for details.
wrapper.java.mainclass=org.tanukisoftware.wrapper.WrapperSimpleApp
# Java Classpath (include wrapper.jar) Add class path elements as
# needed starting from 1
wrapper.java.classpath.1=wrapper.jar
wrapper.java.classpath.2=../bin/h2.jar
wrapper.java.classpath.3=%H2DRIVERS%
wrapper.java.classpath.4=%CLASSPATH%
# Java Library Path (location of Wrapper.DLL or libwrapper.so)
wrapper.java.library.path.1=
# Java Additional Parameters
#wrapper.java.additional.1=
# Initial Java Heap Size (in MB)
#wrapper.java.initmemory=16
# Maximum Java Heap Size (in MB)
#wrapper.java.maxmemory=64
# Application parameters. Add parameters as needed starting from 1
wrapper.app.parameter.1=org.h2.tools.Server
wrapper.app.parameter.2=-tcp
wrapper.app.parameter.3=-web
wrapper.app.parameter.4=-webAllowOthers
#********************************************************************
# Wrapper Logging Properties
#********************************************************************
# Format of output for the console. (See docs for formats)
wrapper.console.format=PM
# Log Level for console output. (See docs for log levels)
wrapper.console.loglevel=INFO
# Log file to use for wrapper output logging.
wrapper.logfile=wrapper.log
# Format of output for the log file. (See docs for formats)
wrapper.logfile.format=LPTM
# Log Level for log file output. (See docs for log levels)
wrapper.logfile.loglevel=INFO
# Maximum size that the log file will be allowed to grow to before
# the log is rolled. Size is specified in bytes. The default value
# of 0, disables log rolling. May abbreviate with the 'k' (kb) or
# 'm' (mb) suffix. For example: 10m = 10 megabytes.
wrapper.logfile.maxsize=0
# Maximum number of rolled log files which will be allowed before old
# files are deleted. The default value of 0 implies no limit.
wrapper.logfile.maxfiles=0
# Log Level for sys/event log output. (See docs for log levels)
wrapper.syslog.loglevel=NONE
#********************************************************************
# Wrapper Windows Properties
#********************************************************************
# Title to use when running as a console
wrapper.console.title=H2 Console
#********************************************************************
# Wrapper Windows NT/2000/XP Service Properties
#********************************************************************
# WARNING - Do not modify any of these properties when an application
# using this configuration file has been installed as a service.
# Please uninstall the service before modifying this section. The
# service can then be reinstalled.
# Name of the service
wrapper.ntservice.name=H2DatabaseService
# Display name of the service
wrapper.ntservice.displayname=H2 Database Engine Service
# Description of the service
wrapper.ntservice.description=H2 Database Engine Service (TCP Server and H2 Console Web-Application)
# Service dependencies. Add dependencies as needed starting from 1
wrapper.ntservice.dependency.1=
# Mode in which the service is installed. AUTO_START or DEMAND_START
wrapper.ntservice.starttype=AUTO_START
# Allow the service to interact with the desktop.
wrapper.ntservice.interactive=false
wrapper.ntservice.account=.\tony
wrapper.ntservice.password=BeyondLakeBarber399N/A
IIS
PS C:\inetpub\wwwroot> ls
Directory: C:\inetpub\wwwroot
Mode LastWriteTime Length Name
---- ------------- ------ ----
d----- 4/27/2020 9:02 PM help
d----- 4/27/2020 9:02 PM html
d----- 4/27/2020 9:02 PM images
d----- 4/27/2020 9:02 PM javadoc
d----- 4/27/2020 9:02 PM text
d----- 4/27/2020 9:02 PM textbase
-a---- 11/21/2017 10:04 AM 8196 .DS_Store
-a---- 4/27/2020 9:02 PM 696 iisstart.htm
-a---- 4/27/2020 9:02 PM 98757 iisstart.png
-a---- 3/13/2019 6:36 AM 1595 index.html
PS C:\inetpub\wwwroot> tree /F /A
Folder PATH listing
Volume serial number is AC2F-6399
C:.
| .DS_Store
| iisstart.htm
| iisstart.png
| index.html
|
+---help
| help.csv
|
+---html
| | advanced.html
| | architecture.html
| | build.html
| | changelog.html
| | cheatSheet.html
| | commands.html
| | datatypes.html
| | download.html
| | faq.html
| | features.html
| | fragments.html
| | frame.html
| | functions.html
| | grammar.html
| | history.html
| | installation.html
| | license.html
| | links.html
| | main.html
| | mainWeb.html
| | mvstore.html
| | navigation.js
| | performance.html
| | quickstart.html
| | roadmap.html
| | search.js
| | source.html
| | sourceError.html
| | stylesheet.css
| | stylesheetPdf.css
| | systemtables.html
| | tutorial.html
| |
| \---images
| connection-mode-embedded-2.png
| connection-mode-embedded.png
| connection-mode-mixed-2.png
| connection-mode-mixed.png
| connection-mode-remote-2.png
| connection-mode-remote.png
| console-2.png
| console.png
| db-16.png
| db-64-t.png
| download-2.png
| download.png
| h2-logo-2.png
| h2-logo.png
| h2-logo_square.png
| icon_disconnect.gif
| language_de.png
| language_en.gif
| language_ja.gif
| mail-support.png
| paypal-donate.png
| performance.png
| quickstart-1.png
| quickstart-2.png
| quickstart-3.png
| quickstart-4.png
| quickstart-5.png
| quickstart-6.png
| screenshot.png
|
+---images
| connection-mode-embedded-2.png
| connection-mode-mixed-2.png
| connection-mode-remote-2.png
| connection-modes.svg
| console-2.png
| console.png
| console.svg
| db-16.png
| db-22.png
| db-24.png
| db-32.png
| db-64-t.png
| db.svg
| download-2.png
| download.png
| download.svg
| favicon.ico
| h2-16.png
| h2-24.png
| h2-32.png
| h2-64.png
| h2-logo-2.png
| h2-logo.png
| h2-logo.svg
| h2_v2_3_7.svg
| paypal-donate.png
| screenshot.png
|
+---javadoc
| animate.js
| classes.html
| index.html
| overview.html
| stylesheet.css
|
+---text
| _docs_en.utf8.txt
| _docs_ja.utf8.txt
|
\---textbase
_docs_en.properties
_messages_en.prop
_text_en.propN/A