# Optimum

## Gaining Access

Nmap scan:

<figure><img src="https://content.gitbook.com/content/qpzdj1tPRpELJdvxuVYh/blobs/y7vUjJtyahe4jpOMEkuU/image.png" alt=""><figcaption></figcaption></figure>

The version of HttpFileServer running here is vulnerable to RCE exploits.

<figure><img src="https://content.gitbook.com/content/qpzdj1tPRpELJdvxuVYh/blobs/4NQWbEWfdu81H5ADKQbU/image.png" alt=""><figcaption></figcaption></figure>

Pick any that you'd like, and we can get a reverse shell as the user.

<figure><img src="https://content.gitbook.com/content/qpzdj1tPRpELJdvxuVYh/blobs/SOpDOEsnS0hHNPbe0qQ4/image.png" alt=""><figcaption></figcaption></figure>

## Privilege Escalation

Really old machine, so it's vulnerable to MS16-098 exploit.&#x20;
