Cap 351
RETIRED MACHINE
Linux
Easy
Cap
Linux
Easy
4.5
MACHINE RATING40178
USER OWNS37770
SYSTEM OWNS05/06/2021
RELEASEDMachine Synopsis
Cap is an easy difficulty Linux machine running an HTTP server that performs administrative functions including performing network captures. Improper controls result in Insecure Direct Object Reference (IDOR) giving access to another user's capture. The capture contains plaintext credentials and can be used to gain foothold. A Linux capability is then leveraged to escalate to root.
Machine Matrix