https://app.hackthebox.com/machines/Arctic

---

Enumeration

Run nmap scan to find for open ports.

Port 8500 gives us the following:

CFIDE seems like some kind of interface

Heading to the administrator page we can find login interface with version number.

Found a potential exploit on searchsploit.

---

Foothold

Download the exploit.

Edit the exploit with the necessary details.

Start a nc listener and run the exploit.

A shell is gained.

First flag is found on user tolis desktop.

Privilege escalation

Run the windows exploit suggester to find for potential exploits.

Get the exploit from here.

Transfer the exploit the windows machine.

Run the exploit and start a nc listener.

A shell is gained.

Root flag is found.