Sau 551
RETIRED MACHINE
Linux
Easy
Sau
Linux
Easy
4.6
MACHINE RATING20374
USER OWNS19760
SYSTEM OWNS08/07/2023
RELEASEDMachine Synopsis
`Sau` is an Easy Difficulty Linux machine that features a `Request Baskets` instance that is vulnerable to Server-Side Request Forgery (SSRF) via `[CVE-2023-27163](https://nvd.nist.gov/vuln/detail/CVE-2023-27163)`. Leveraging the vulnerability we are to gain access to a `Maltrail` instance that is vulnerable to Unauthenticated OS Command Injection, which allows us to gain a reverse shell on the machine as `puma`. A `sudo` misconfiguration is then exploited to gain a `root` shell.
Machine Matrix