Shadow Phishing Walkthrough

Challenge Statement#

Solution#

This one is similar to the Ghost Phishing Challenge, but this time we have to attach a Windows Executable.

We can use msfvenom to generate the executable file.

Now, we have to set up the Metasploit Reverse TCP listener.

Now, we can send the email and within a few minutes we should be able to get a Meterpreter shell into the machine.
We can then traverse the system and locate the flag.

Adapted from harishkannan05/THM-HackfinityBattle-Writeup under MIT.