IP: 10.10.10.204
Difficulty: Easy
Summary: Omni is a Windows Box that is pwned using Windows Device Portal exploit. Post-exploitation, enumeration of files leads to discovery of PSCredential Object and decoding it to gain root flag.
Read More
IP: 10.10.10.209
Difficulty: Easy
Summary: Doctor is a Linux Box that can be exploited using Server Site Template Injection (SSTI) or Cross Site Request Forgery (CSRF). The escalated Splunk service is exploited to escalate privileges to root by using Splunk 8.0.5 exploit.
Read More