Lame from HackTheBox is an retired machine which is vulnerable to infamous CVE - 2007-2447 & 2004-2687 SMB vulnerabilities which can be easily exploited with publicly available scripts and Metasploit

Legacy from HackTheBox is an retired machine which is vulnerable to infamous MS08-067 & MS17-010 SMB vulnerabilities which can be easily exploited with publicly available scripts and Metasploit.