Codify 574
RETIRED MACHINE
Linux
Easy
Codify
Linux
Easy
4.4
MACHINE RATING16496
USER OWNS15409
SYSTEM OWNS04/11/2023
RELEASEDMachine Synopsis
Codify is an easy Linux machine that features a web application that allows users to test `Node.js` code. The application uses a vulnerable `vm2` library, which is leveraged to gain remote code execution. Enumerating the target reveals a `SQLite` database containing a hash which, once cracked, yields `SSH` access to the box. Finally, a vulnerable `Bash` script can be run with elevated privileges to reveal the `root` user's password, leading to privileged access to the machine.
Machine Matrix