RetroTwo 685
RETIRED MACHINE
Windows
Easy
RetroTwo
Windows
Easy
5
MACHINE RATING47
USER OWNS37
SYSTEM OWNS22/07/2025
RELEASEDMachine Synopsis
RetroTwo is an easy difficulty `Windows` machine, which highlights AD exploitation. Initial external enumeration reveals a publicly accessible `SMB Share` containing a `Microsoft Access Database` file, which is password protected. After cracking the password, the contents of the `accdb` file are accessible, enabling the retrieval of the `VBA` script inside, where `AD credentials` can be retrieved. Then, by abusing `pre-created computer accounts` , we gain access to a computer account with the GenericWrite privilege over another account, which, when leveraged, provides access to the system via `RDP` . Finally, exploiting the `RpcEptMapper` registry key results in privilege escalation to a system account.
Machine Matrix
