// notes/ Practice Boxes
🟦
DVR4 — Proving Grounds
22/tcp open ssh Bitvise WinSSHD 8.48 (FlowSsh 8.48)
#proving grounds#pg#walkthrough#boxes#os:windows#os:linux#tech:cve
DVR4 — Proving Grounds
Port Enumeration
🐺 howlsec@kalibash
$22/tcp open ssh Bitvise WinSSHD 8.48 (FlowSsh 8.48)$135/139/445 msrpc / netbios / microsoft-ds (Windows)$5040/tcp open unknown$7680/tcp open pando-pub$8080/tcp open http-proxy Argus Surveillance DVR (Actual Drawing 6.0 / PYSOFTWARE)$49664+/tcp msrpcThe key surface is Argus Surveillance DVR on port 8080. This software is affected by a directory traversal (CVE-2022-25012) and a weak-password-hash / privilege issue — the DVR web app is the intended foothold (directory traversal to read files such as the DVR's own PSI user database, then RDP/SSH with recovered creds).