Powershell Commands

Question

Powershell Commands

Cyberkur Syiem 20

Q. This host seems to have several PowerShell modules loaded, and this user's flag is hidden in one of them.

I am trying to access this Directory: C:\Windows\system32\WindowsPowerShell\v1.0\Modules. to extract a content there, because it seems that there is a user's flag in one of the file (PowerShell modules loaded). When i tried Get-Content -Path C:\Windows\system32\WindowsPowerShell\v1.0\Modules. it says permission denied. I'm not able to switch to the Administrator mode also, since it is a practice scenario. so is there anyway to extract the flag or content from this Directory?

Emily Du-MSFT 51,836 Reputation points Microsoft External Staff

2023-05-29T09:00:06.99+00:00

Whether you install SharePoint module in the Windows PowerShell?

1 answer

Your answer

Emily Du-MSFT 51,836 Reputation points Microsoft External Staff

2023-05-29T09:00:06.99+00:00

Whether you install SharePoint module in the Windows PowerShell?

Answer 1

MotoX80 36,291

Get-Content reads the content of files, like a text file. You are trying to read a directory. That won't work. You need to use this command to list the file names.

Get-ChildItem C:\Windows\system32\WindowsPowerShell\v1.0\Modules -recurse

and this user's flag is hidden in one of them.

What does that mean? Are you looking for a file with a certain name? Or are you looking for some specific text string in a file?

That folder is only for installed Powershell modules. There should be no user specific data in that folder structure.

Lolbit 0 Reputation points

2023-06-16T17:22:17.0166667+00:00

@MotoX80 Hi, Anyway the guy was referring the username that the hidden flag in these Modules, obviously I'm having the same problem too because I really don't know how to find it. I had tried this command too but I can't find the flag.
MotoX80 36,291 Reputation points

2023-06-16T22:52:36.04+00:00

I'm happy to help you guys but I have no idea what you are looking for. Do you know the name of this user? What exactly do you consider a "flag" to be? Is it a file? Is it a function name? Is it a variable? Is there some specific text string that you are looking for?

From a "teaching Powershell" perspective, this seems to be a very strange lesson.

Can you share the exact instructions that you were given?
Lolbit 0 Reputation points

2023-06-17T17:31:01.7266667+00:00

The flag is the key to moving on to the next exercise. The flag can be a text document, a name, an object, it depends on the problem it poses to you.
MotoX80 36,291 Reputation points

2023-06-17T17:58:46.61+00:00

Let's take the txt file as an example. There are 1700 txt files on my Win11 laptop. How would I tell which one is a "flag"?

You need a way to identify a "flag". Is it the name of the file? Is it a certain character string within the file?

Remember, we don't know anything about the exercises you are taking. We can't see your screen. You can't just ask "how do I find a flag", without telling us exactly what a "flag" is.

Share via

Powershell Commands

1 answer

Your answer