Sniper
Sniper
Sniper 211
Sniper
RETIRED MACHINE

Sniper

Sniper - Windows Windows
Sniper - Medium Medium

4.7

MACHINE RATING

3953

USER OWNS

3313

SYSTEM OWNS

05/10/2019

RELEASED
Created by MinatoTW & felamos

Machine Synopsis

Sniper is a medium difficulty Windows machine which features a PHP server. The server hosts a file that is found vulnerable to local and remote file inclusion. Command execution is gained on the server in the context of `NT AUTHORITY\iUSR` via local inclusion of maliciously crafted PHP Session files. Exposed database credentials are used to gain access as the user `Chris`, who has the same password. Enumeration reveals that the administrator is reviewing CHM (Compiled HTML Help) files, which can be used the leak the administrators NetNTLM-v2 hash. This can be captured, cracked and used to get a reverse shell as administrator using a PowerShell credential object.

Machine Matrix

Ready to start your
hacking journey?