Curling 160
RETIRED MACHINE
Linux
Easy
Curling
Linux
Easy
4.8
MACHINE RATING12896
USER OWNS11964
SYSTEM OWNS27/10/2018
RELEASEDMachine Synopsis
Curling is an Easy difficulty Linux box which requires a fair amount of enumeration. The password is saved in a file on the web root. The username can be download through a post on the CMS which allows a login. Modifying the php template gives a shell. Finding a hex dump and reversing it gives a user shell. On enumerating running processes a cron is discovered which can be exploited for root.
Machine Matrix