Smasher2 191
RETIRED MACHINE
Linux
Insane
Smasher2
Linux
Insane
4.6
MACHINE RATING692
USER OWNS652
SYSTEM OWNS01/06/2019
RELEASEDMachine Synopsis
Smasher2 is an insane difficult linux machine, which requires knowledge of Python, C and kernel exploitation. A folder protected by Basic Authentication is brute-forced to gain source code for a session manager on one of the vhosts. A shared object file is used by the session manager which has a vulnerable function leading to credential leakage. Then a kernel module is found which uses a weak mmap handler and is exploited to gain a root shell.
Machine Matrix