Postman 215
RETIRED MACHINE
Linux
Easy
Postman
Linux
Easy
4.1
MACHINE RATING15916
USER OWNS15634
SYSTEM OWNS02/11/2019
RELEASEDMachine Synopsis
Postman is an easy difficulty Linux machine, which features a Redis server running without authentication. This service can be leveraged to write an SSH public key to the user's folder. An encrypted SSH private key is found, which can be cracked to gain user access. The user is found to have a login for an older version of Webmin. This is exploited through command injection to gain root privileges.
Machine Matrix