PC 543
RETIRED MACHINE
Linux
Easy
PC
Linux
Easy
4.4
MACHINE RATING10624
USER OWNS9710
SYSTEM OWNS20/05/2023
RELEASEDMachine Synopsis
PC is an Easy Difficulty Linux machine that features a `gRPC` endpoint that is vulnerable to SQL Injection. After enumerating and dumping the database's contents, plaintext credentials lead to `SSH` access to the machine. Listing locally running ports reveals an outdated version of the `pyLoad` service, which is susceptible to pre-authentication Remote Code Execution (RCE) via `CVE-2023-0297`. As the service is run by `root`, exploiting this vulnerability leads to fully elevated privileges.
Machine Matrix