Crocodile 404
RETIRED MACHINE
Linux
Very Easy
Crocodile
Linux
Very Easy
4.7
MACHINE RATING2
USER OWNS196262
SYSTEM OWNS06/10/2021
RELEASEDMachine Synopsis
Crocodile is a very easy Linux machine which showcases the dangers of misconfigured authentication and sensitive data exposure. A vulnerable FTP server instance is misconfigured to allow anonymous authentication and upon enumerating the server, sensitive files can be found containing cleartext credentials. Enumerating and fuzzing the website will reveal a hidden login endpoint where the previously acquired credentials can be used to gain access to the admin panel.
Machine Matrix
