Markup 293
RETIRED MACHINE
Windows
Very Easy
Markup
Windows
Very Easy
4.3
MACHINE RATING20411
USER OWNS19400
SYSTEM OWNS25/10/2021
RELEASEDMachine Synopsis
Markup is a very easy Windows machine that explores XML External Entity (XXE) vulnerabilities, insecure file permissions and misconfigured scheduled tasks. A vulnerable web application allows for user-supplied XML input to be parsed allowing the retrieval of sensitive files on the host machine, including the user's private SSH key. Privilege escalation can be achieved by identifying and overwriting a scheduled batch script with insecure permissions to execute a reverse shell.
Machine Matrix
