Usage 597
RETIRED MACHINE
Linux
Easy
Usage
Linux
Easy
3.8
MACHINE RATING6781
USER OWNS6326
SYSTEM OWNS13/04/2024
RELEASEDMachine Synopsis
Usage is an easy Linux machine that features a blog site vulnerable to SQL injection, which allows the administrator's hashed password to be dumped and cracked. This leads to access to the admin panel, where an outdated `Laravel` module is abused to upload a PHP web shell and obtain remote code execution. On the machine, plaintext credentials stored in a file allow SSH access as another user, who can run a custom binary as `root`. The tool makes an insecure call to `7zip`, which is leveraged to read the `root` user's private SSH key and fully compromise the system.
Machine Matrix