Book
Book
Book 230
Book
RETIRED MACHINE

Book

Book - Linux Linux
Book - Medium Medium

4

MACHINE RATING

5385

USER OWNS

5020

SYSTEM OWNS

22/02/2020

RELEASED
Created by MrR3boot

Machine Synopsis

Book is a medium difficulty Linux machine hosting a Library application. It allows users to sign up and add books, as well as provide feedback. The back-end database is found to be vulnerable to SQL truncation, which is leveraged to register an account as admin and escalate privileges. The admin panel contains additional functionality to export PDFs, which is exploited through XSS to gain SSH access. Finally, misconfigured logs are exploited to get root.

Machine Matrix

Ready to start your
hacking journey?