Arctic

Hack The Box: Machine

Press enter or click to view image in full size

Details

Release Date: July 28th, 2017
OS: Windows
Difficulty: Easy
Created by: ch4p
Link: https://app.hackthebox.com/machines/Arctic
Soundtrack: Never Enough — Turnstile

Summary

Arctic is an easy-rated Windows machine on Hack The Box created by ch4p. The path to root involves exploiting a Remote Code Execution (RCE) vulnerability in an outdated version of Adobe ColdFusion to gain an initial foothold, followed by a privilege escalation leveraging the SeImpersonatePrivilege with JuicyPotato.

Reconnaissance

Nmap

sudo nmap -Pn -p- -sCV -O -T4 -oA nmap/arctic 10.129.207.19

Output

Starting Nmap 7.95 ( https://nmap.org ) at 2025-05-31 22:46 ADT
Nmap scan report for 10.129.207.19
Host is up (0.082s latency).
Not shown: 65532 filtered tcp ports (no-response)
PORT      STATE SERVICE VERSION
135/tcp   open  msrpc   Microsoft Windows RPC
8500/tcp  open  fmtp?
49154/tcp open  msrpc   Microsoft Windows RPC
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general…