Altered 460
RETIRED MACHINE
Linux
Hard
Altered
Linux
Hard
4.7
MACHINE RATING281
USER OWNS226
SYSTEM OWNS30/03/2022
RELEASEDMachine Synopsis
`Altered` is a hard-difficulty Linux machine that features a `Laravel-based` web application with a vulnerable password reset mechanism. By bypassing rate limiting using `HTTP` headers, an attacker can brute-force the reset `PIN`. Foothold can be achieved by exploiting an endpoint vulnerable to `SQL injection`, leveraging type juggling to bypass an integrity check. Enumerating the machine reveals an outdated kernel version, which is leveraged to gain a shell as `root`.
Machine Matrix
