Skip to content

Windows File Transfer Methods

ℹ️ Information

Question

Download the file flag.txt from the web root using wget from the Pwnbox. Submit the contents of the file as your answer.

📋 Walkthrough

The provided IP has a website on the default port (80). Let's download the file flag.txt from the website using wget

$ wget 10.129.24.40/flag.txt
--2025-07-01 03:08:02--  http://10.129.24.40/flag.txt
Connecting to 10.129.24.40:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 32 [text/plain]
Saving to: ‘flag.txt’

flag.txt            100%[===================>]      32  --.-KB/s    in 0s      

2025-07-01 03:08:02 (6.86 MB/s) - ‘flag.txt’ saved [32/32]
Answer

b1a4ca918282fcd96004565521944a3b

Question

Note

RDP to 10.129.24.40 (ACADEMY-MISC-MS02) with user htb-student and password HTB_@cademy_stdnt!

Upload the attached file named upload_win.zip to the target using the method of your choice. Once uploaded, unzip the archive, and run "hasher upload_win.txt" from the command line. Submit the generated hash as your answer.

📋 Walkthrough

We have to download the zip file attached to the challenge. If are you using the virtual machine in HTB, you can download it using Firefox or wget/curl Let's use those credentials to login in rdp with a shared folder:

xfreerdp /u:htb-student /p:HTB_@cademy_stdnt! /v:10.129.24.40 /drive:.,sharedFolder
Going to network shares we can find the sharedFolder. Lets upload it and run the command hasher upload_win.txt.

Answer

f458303ea783c224c6b4e7ef7f17eb9d