Arctic is an easy Hack The Box Windows machine featuring a vulnerable Adobe ColdFusion server. Initial access is gained via an unauthenticated file upload exploit. After obtaining a reverse shell, privilege escalation is achieved using the MS10-059 vulnerability, resulting in full system compromise.
Jerry is an easy Windows machine focused on exploiting Apache Tomcat, allowing attackers to gain a NT AUTHORITY\SYSTEM shell and fully compromise the system.