// notes/ Practice Boxes
🟦

DVR4 — Proving Grounds

22/tcp open ssh Bitvise WinSSHD 8.48 (FlowSsh 8.48)

#proving grounds#pg#walkthrough#boxes#os:windows#os:linux#tech:cve

DVR4 — Proving Grounds

Port Enumeration

🐺 howlsec@kali
$22/tcp open ssh Bitvise WinSSHD 8.48 (FlowSsh 8.48)
$135/139/445 msrpc / netbios / microsoft-ds (Windows)
$5040/tcp open unknown
$7680/tcp open pando-pub
$8080/tcp open http-proxy Argus Surveillance DVR (Actual Drawing 6.0 / PYSOFTWARE)
$49664+/tcp msrpc

The key surface is Argus Surveillance DVR on port 8080. This software is affected by a directory traversal (CVE-2022-25012) and a weak-password-hash / privilege issue — the DVR web app is the intended foothold (directory traversal to read files such as the DVR's own PSI user database, then RDP/SSH with recovered creds).