Cascade
Cascade
Cascade 235
Cascade
RETIRED MACHINE

Cascade

Cascade - Windows Windows
Cascade - Medium Medium

4.7

MACHINE RATING

8160

USER OWNS

7430

SYSTEM OWNS

28/03/2020

RELEASED
Created by VbScrub

Machine Synopsis

Cascade is a medium difficulty Windows machine configured as a Domain Controller. LDAP anonymous binds are enabled, and enumeration yields the password for user `r.thompson`, which gives access to a `TightVNC` registry backup. The backup is decrypted to gain the password for `s.smith`. This user has access to a .NET executable, which after decompilation and source code analysis reveals the password for the `ArkSvc` account. This account belongs to the `AD Recycle Bin` group, and is able to view deleted Active Directory objects. One of the deleted user accounts is found to contain a hardcoded password, which can be reused to login as the primary domain administrator.

Machine Matrix

Ready to start your
hacking journey?