Arkham 179
RETIRED MACHINE
Windows
Medium
Arkham
Windows
Medium
4.8
MACHINE RATING1912
USER OWNS1788
SYSTEM OWNS16/03/2019
RELEASEDMachine Synopsis
Arkham is a medium difficulty Windows box which needs knowledge about encryption, java deserialization and Windows exploitation. A disk image present in an open share is found which is a LUKS encrypted disk. The disk is cracked to obtain configuration files. The Apache MyFaces page running on tomcat is vulnerable to deserialization but the viewstate needs to encrypted. After establishing a foothold an Outlook OST file is found, which contains a screenshot with a password. The user is found to be in the Administrators group, and a UAC bypass can be performed to gain a SYSTEM shell.
Machine Matrix