> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Helpline

> Writeups verificados de la máquina Helpline de Hack The Box

# Helpline

<p className="machine-summary"><span className="prompt"><code>\$ tldr</code></span> ManageEngine ServiceDesk RCE → Mimikatz + EFS decrypt → SYSTEM</p>

<div className="machine-meta">
  | ·                 | ·                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
  | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
  | Sistema operativo | Windows                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
  | Dificultad        | Difícil                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
  | Vector            | <span className="vbadge vbadge-windows-privesc">Windows privesc</span>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
  | IP                | `10.10.10.132`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
  | Fecha de retirada | 2019-08-17                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
  | Skills            | ManageEngine ServiceDesk Plus User Enumeration ManageEngine ServiceDesk Plus Authentication Bypassing ManageEngine ServiceDesk Plus Remote Code Execution Disabling Windows Defender (PowerShell) Mimikatz - Getting NTLM User Hashes (lsadump::sam) Reading Event Logs with Powershell (RamblingCookieMonster) \[Get-WinEventData] Decrypting EFS files with Mimikatz Getting the certificate with Mimikatz (crypto::system) Decrypting the masterkey with Mimikatz (dpapi::masterkey) Decrypting the private key with Mimikatz (dpapi::capi) Building a correct PFX with Openssl Installing the PFX via certutil Installing VNC in the box via msiexec Connecting to the VNC service using vncviewer Converting Secure String File to PlainText Using RunAs to execute commands as the administrator |
</div>

## Writeups

| Idioma  | Autor                    | Formato | Enlace                                                            |
| ------- | ------------------------ | ------- | ----------------------------------------------------------------- |
| 🇪🇸 ES | **S4vitar**              | Vídeo   | [Abrir](https://www.youtube.com/watch?v=EGlLewVI_M0)              |
| 🇪🇸 ES | **El Pingüino de Mario** | Vídeo   | [Abrir](https://www.youtube.com/watch?v=Nic9PtHQsx4)              |
| 🇬🇧 EN | **0xdf**                 | Texto   | [Abrir](https://0xdf.gitlab.io/2019/08/17/htb-helpline-kali.html) |
| 🇬🇧 EN | **0xdf**                 | Texto   | [Abrir](https://0xdf.gitlab.io/2019/08/17/htb-helpline-win.html)  |
| 🇬🇧 EN | **0xdf**                 | Texto   | [Abrir](https://0xdf.gitlab.io/2019/08/17/htb-helpline.html)      |
| 🇬🇧 EN | **IppSec**               | Vídeo   | [Abrir](https://www.youtube.com/watch?v=Vs3oSDlzxwA)              |

## Recursos por skill

Documentación curada para cada técnica que aparece en la columna *Skills* de arriba. Fuentes: HackTricks, GTFOBins, PortSwigger, etc.

| Skill                          | Fuente      | Enlace                                                                         |
| ------------------------------ | ----------- | ------------------------------------------------------------------------------ |
| Remote Code Execution (RCE)    | HackTricks  | [Abrir](https://book.hacktricks.wiki/en/pentesting-web/command-injection.html) |
| Authentication Vulnerabilities | PortSwigger | [Abrir](https://portswigger.net/web-security/authentication)                   |

## Skills relacionadas que conviene dominar

Local File Inclusion (LFI) · Remote File Inclusion (RFI) · Shellshock (CVE-2014-6271)

## Si te gustó esta máquina, prueba

* [Chaos](/htb/machines/linux/medio/chaos) — Linux, Medio
* [Epsilon](/htb/machines/linux/medio/epsilon) — Linux, Medio
* [Knife](/htb/machines/linux/facil/knife) — Linux, Fácil
* [Shibboleth](/htb/machines/linux/medio/shibboleth) — Linux, Medio
* [SwagShop](/htb/machines/linux/facil/swagshop) — Linux, Fácil

***

## Comentarios y truquillos

¿Algo no funcionó del writeup oficial? ¿Has encontrado un truco mejor? Compártelo aquí — los comentarios viven en [GitHub Discussions](https://github.com/FFuson/HTB_Writeups/discussions).

<div className="rootea-giscus-wrap" data-giscus-term="machine:helpline" data-giscus-lang="es" />

*Última actualización: 2026-06-07*

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"TechArticle","headline":"Helpline — HTB Writeup Index","name":"Helpline","url":"https://rootea.es/htb/machines/windows/dificil/helpline","inLanguage":"es","datePublished":"2019-08-17","dateModified":"2026-06-07","about":{"@type":"Thing","name":"Hack The Box (HTB)"},"keywords":"Remote Code Execution (RCE), Authentication Vulnerabilities","isPartOf":{"@type":"WebSite","name":"rootea.es","url":"https://rootea.es"},"author":{"@type":"Organization","name":"rootea.es"},"proficiencyLevel":"Difícil"}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https://rootea.es"},{"@type":"ListItem","position":2,"name":"Windows","item":"https://rootea.es/htb/machines/windows/dificil/index"},{"@type":"ListItem","position":3,"name":"Difícil","item":"https://rootea.es/htb/machines/windows/dificil/index"},{"@type":"ListItem","position":4,"name":"Helpline","item":"https://rootea.es/htb/machines/windows/dificil/helpline"}]}`}
</script>