Resource
Resource
Resource 619
Resource
RETIRED MACHINE

Resource

Resource - Linux Linux
Resource - Hard Hard

3.3

MACHINE RATING

2811

USER OWNS

2181

SYSTEM OWNS

03/08/2024

RELEASED
Created by 0xdf

Machine Synopsis

Resource is a hard difficulty Linux machine that intricately covers various ways to use `OpenSSH` private and public keys. It centers around the `SSG IT Resource Center` which offers a ticketing service to address the IT issues (`SSH` access, website and security issues, etc. ) of its customers. Upon creating a ticket through the website we can execute Local File Inclusion, trigger a reverse shell, and get access to what appears to be a docker container that hosts the ticketing website. From this point, there are various clues in past tickets and leftover `SSH` artifacts as well as a key signing API service that will lead to pivoting through other users and escaping the docker. Finally, the machine includes various scripts detailing the functions of its ticketing service and key signing API, one of which includes a vulnerable line of code allowing for brute forcing the final `SSH` key and achieving full privilege escalation.

Machine Matrix

Ready to start your
hacking journey?