Remote 234
RETIRED MACHINE
Windows
Easy
Remote
Windows
Easy
4.3
MACHINE RATING15710
USER OWNS14167
SYSTEM OWNS21/03/2020
RELEASEDMachine Synopsis
Remote is an easy difficulty Windows machine that features an Umbraco CMS installation. Credentials are found in a world-readable NFS share. Using these, an authenticated Umbraco CMS exploit is leveraged to gain a foothold. A vulnerable TeamViewer version is identified, from which we can gain a password. This password has been reused with the local administrator account. Using `psexec` with these credentials returns a SYSTEM shell.
Machine Matrix