Oracle 5 -> 10

Oracle 5 -> 6

The password for oracle6 is the name of the GPO that contains a description of “I_AM_GROOT” PLUS the name of the file on the user’s desktop.

Get-GPO -All -Domain "underthewire.tech" | Where {$_.Description -eq 'I_am_Groot'} | select displayname

Password: charlie1337

Oracle 6 -> 7

The password for oracle7 is the name of the OU that doesn’t have a GPO linked to it PLUS the name of the file on the user’s desktop.

Get-ADOrganizationalUnit -filter * -Property *

Password: t-50_97

Oracle 7 -> 8

The password for oracle8 is the name of the domain that a trust is built with PLUS the name of the file on the user’s desktop.

Get-ADTrust -Filter * | select name

Password: multiverse111

Oracle 8 -> 9

The password for oracle9 is the name of the file in the GET Request from www.guardian.galaxy.com within the log file on the desktop.

type .\logs.txt | Select-String "guardian"

Password: star-lord

Oracle 9 -> 10

The password for oracle10 is the computer name of the DNS record of the mail server listed in the UnderTheWire.tech zone PLUS the name of the file on the user’s desktop.

Get-DnsServerResourceRecord -ZoneName "underthewire.tech" -RRType "MX"

Password: utw_exch9229

Refer Cyborg 2 -> 3