Editorial 608
RETIRED MACHINE
Linux
Easy
Editorial
Linux
Easy
4.3
MACHINE RATING12245
USER OWNS11350
SYSTEM OWNS15/06/2024
RELEASEDMachine Synopsis
`Editorial` is an easy difficulty Linux machine that features a publishing web application vulnerable to `Server-Side Request Forgery (SSRF)`. This vulnerability is leveraged to gain access to an internal running API, which is then leveraged to obtain credentials that lead to `SSH` access to the machine. Enumerating the system further reveals a Git repository that is leveraged to reveal credentials for a new user. The `root` user can be obtained by exploiting [CVE-2022-24439](https://nvd.nist.gov/vuln/detail/CVE-2022-24439) and the sudo configuration.
Machine Matrix