Cypher 650
RETIRED MACHINE
Linux
Medium
Cypher
Linux
Medium
4.3
MACHINE RATING5475
USER OWNS5286
SYSTEM OWNS01/03/2025
RELEASEDMachine Synopsis
Cypher is a medium-difficulty Linux machine that requires exploiting a cypher injection vulnerability to bypass authentication on a login page. This grants users access to a custom web application to execute custom queries. A Java file is discovered by fuzzing the web application, revealing a command injection vulnerability that provides access to the machine as the `neo4j` user. A history file contains the credentials for the `graphasm` user, who has permission to execute `bbot` as `root` user. This privilege escalation is exploited by creating a custom module that allows executing commands.
Machine Matrix
