Machine Synopsis

Omni is an easy difficulty Windows IoT Core machine. Network enumeration reveals that a web page titled `Windows Device Portal` is hosted on the remote machine, which indicates that Windows IoT Core OS that is installed. This OS implements a vulnerable service named Sirep Test Service, that allows remote command execution on the host. Exporting and cracking hashes from the registry hives reveals the password for the user `app`, which is used to access to the Windows Device Portal web application. Enumeration of the file system reveals a sequence of Powershell Credential files, that eventually leads to the password for the `administrator` user. Finally, logging into the web application as the `administrator`, we get the root.txt.