Spooktrol 413
RETIRED MACHINE
Linux
Hard
Spooktrol
Linux
Hard
5
MACHINE RATING171
USER OWNS147
SYSTEM OWNS26/10/2021
RELEASEDMachine Synopsis
Spooktrol is a hard-difficulty Linux machine that demonstrates exploitation of a malware C2 server. The tasking message is hijacked to upload a file using a directory traversal vulnerability. This vulnerability allows the SSH key to be written to the root user's `authorized_keys` file within the container. By exploiting the C2 framework's database, a task is written to another agent, granting access to a shell on the system.
Machine Matrix
