Travel 252
RETIRED MACHINE
Linux
Hard
Travel
Linux
Hard
4.9
MACHINE RATING1991
USER OWNS1790
SYSTEM OWNS16/05/2020
RELEASEDMachine Synopsis
Travel is a hard difficulty Linux machine that features a WordPress instance along with a development server. The server is found to host an exposed Git repository, which reveals sensitive source code. The source code is analyzed and an SSRF and unsafe deserialization vulnerability are identified. These are leveraged to gain code execution. A backup password is cracked and used to move laterally. The user is found to be an LDAP administrator and can edit user attributes. This is leveraged to modify group membership and gain root privileges.
Machine Matrix