Hack The Box: Machine

Lame

Release date: March 15th, 2017
OS: Linux
Categories: Vulnerability Assessment, Enterprise Network
Difficulty: Easy
Created by: ch4p
Link: https://app.hackthebox.com/machines/Lame
Soundtrack: Cruel Times — Superheaven

Summary

In this walkthrough, we explore the Lame machine, focusing on an SMB vulnerability that allows arbitrary command execution. After identifying the vulnerability (CVE-2007–2447) in the Samba service, we use a Metasploit module to exploit it. This grants us root access via a reverse TCP shell, and we enhance our control by upgrading to a Meterpreter session, enabling further enumeration and exploitation without needing privilege escalation.

Enumeration

Nmap scan

nmap -Pn -sV -sC -O -T4 -p- -oA lame 10.10.10.3

Output

Starting Nmap 7.95 ( https://nmap.org ) at 2025-02-23 15:54 AST
Nmap scan report for 10.10.10.3
Host is up (0.048s latency).
Not shown: 65530 filtered tcp ports (no-response)
PORT     STATE SERVICE     VERSION
21/tcp   open  ftp         vsftpd 2.3.4
| ftp-syst: 
|…