Privilege Escalation and repair of wasu Virtual Host

The process will not be mentioned. No difficulty. There is a dede program on the side of the station without patching.
Check that ws exists. Supports net.
Run iissqy first. You can see all the site directories.

Unfortunately, the names cannot be different from directories.
Only permission escalation is required. First, several Writable Directories overflow. No one can.
Smoke and organize your thoughts.
Read the registry.

Huazhong virtual machine...
The first thought is the ftp password.
Regedit/e "c: windowsTemp1.ini" "HKEY_LOCAL_MACHINESoftwareCat SoftServ-UDomains"
I heard that the plaintext can be exported. I tried it.
Who knows what to export. Or ciphertext. Take out the attack. Fruitless ..
Continue to repeat the registry.
I forgot the location of the Registry in huazu. I ran to Baidu again.
Found several locations
HKEY_LOCAL_MACHINESOFTWAREMySQL AB
HKEY_LOCAL_MACHINESOFTWAREHZHOSTCONFIG
HKEY_LOCAL_MACHINESOFTWAREcat softserv-u
Except su. The other two are fruitless ..
You can only flip it one by one. Go
HKEY_LOCAL_MACHINESOFTWAREhzhostconfigsettings
This location finally shows what I want to see

Ciphertext. This shows where you are going.
The ciphertext of huazu can be cracked. I found a ciphertext cracking tool on the Internet. Smooth sa password cracking
Login

Directly add a user to log on ..
Package program. Call a friend for download.