Machine Synopsis

Dyplesher is an insane difficulty Linux machine featuring multiple technologies and vulnerabilities. Vhost enumeration reveals a Git repository containing source code, in which we find credentials. These credentials are used to enumerate the Memcache service and obtain further credentials. These are in turn used to gain access to a Gogs server which has multiple private repositories. Enumeration of release files in one repository reveals another set of credentials that are used to access a Minecraft server application. A foothold can be gained by uploading a Minecraft plugin. Credentials found in a network capture can be used to escalate to another user. Publishing a Cuberite plugin over the AMQP protocol leads to a root shell.