Welcome to the last machine in this course.
Before we get to the capstone challenge so this box is called blaster and blaster is actually a remake
of another box on track me called retro now retro had a privilege escalation of this C V E twenty nineteen
dash thirteen eighty eight which we're going to talk about in a second but it was very very difficult
to escalate.
There were just issues you had to trigger it just in the right way and there were other escalation parts
on that machine that allowed you to elevate without having to worry about this particular exploit.
Now one day I was on stream doing a walkthrough of retro and the creator happened to be there and I
said Man I'm making this course and I would really love to have a CV twenty nineteen thirteen eighty
eight IN THE COURSE.
AND HE SAID I GOT YOU.
AND HE CREATED blaster for me.
So a big shout out to him for creating this.
And on top of it they made it free.
So you don't have to pay for this room.
So shout a dark star seven for seven one for doing this and try Hackney for being an awesome platform
and just allowing this to happen.
So we're going to utilize blaster Blaster is a very CTF like box and you're going to see why here once
we get into it.
So go ahead and join the room start your machine and get your ad map skins started while you're doing
that and make sure also that you use a dash p n because this is not a pink ball machine.
So make sure you scan the dash pen.
Now while you're doing that let's go ahead and discuss briefly what the CV 20 19 13 eight is and we'll
start here with this get hub version of it.
Now this is in another language.
But basically when you go out and you try to access a Web page and you get an error you have to accept
the certificate.
Now the certificate in this this CV was allowing for Windows to elevate privileges that we could use
this vulnerability to escalate via this window certificate dialogue because it was not properly enforcing
the user privileges.
So you're going to see how that works.
You're welcome to view this little footage here or there's actually a really decent walkthrough by zero
day initiative on YouTube that you can watch as well and see how it functions fully.
Now you can go ahead and give this box a try.
You should be able to do it on your own.
So give it a go even try the escalation on your own if you want and you should be able to watch this
video and escalate.
But we'll walk through the box here in the next few videos so I'll see you in the next video when we
talk about how we gain a foothold on this machine.