APT 296
RETIRED MACHINE
Windows
Insane
APT
Windows
Insane
3.8
MACHINE RATING1295
USER OWNS1091
SYSTEM OWNS31/10/2020
RELEASEDMachine Synopsis
APT is an insane difficulty Windows machine where RPC and HTTP services are only exposed. Enumeration of existing RPC interfaces provides an interesting object that can be used to disclose the IPv6 address. The box is found to be protected by a firewall exemption that over IPv6 can give access to a backup share. User enumeration and bruteforce attacks can give us access to the registry which contains login credentials. The machine is configured to allow authentication via the NTLMv1 protocol, which can be leveraged to gain system access.
Machine Matrix