Devvortex 577
RETIRED MACHINE
Linux
Easy
Devvortex
Linux
Easy
4.5
MACHINE RATING16642
USER OWNS16111
SYSTEM OWNS25/11/2023
RELEASEDMachine Synopsis
Devvortex is an easy-difficulty Linux machine that features a Joomla CMS that is vulnerable to information disclosure. Accessing the service's configuration file reveals plaintext credentials that lead to Administrative access to the Joomla instance. With administrative access, the Joomla template is modified to include malicious PHP code and gain a shell. After gaining a shell and enumerating the database contents, hashed credentials are obtained, which are cracked and lead to SSH access to the machine. Post-exploitation enumeration reveals that the user is allowed to run apport-cli as root, which is leveraged to obtain a root shell.
Machine Matrix