Location https://download.vulnhub.com/necromancer/necromancer.ova Description The Necromancer boot2root box was created for a recent SecTalks Brisbane CTF competition. There are 11 flags to collect on your way to solving the challenging, and the difficulty level is considered as beginner. The end goal is simple… destroy The Necromancer! Enumeration I started out with a simple nmap scan, but […]
Location https://download.vulnhub.com/primer/PRIMER.tar Description Concept This is a story based challenge written in a style heavily inspired by Neil Stephensons Snow Crash and William Gibsons Sprawl Trilogy. Each chapter is unlocked by solving the puzzle. From hardcoded clear text javascript password checks, SQL-injections and cracking hashes to a simulated terminal. You only need to start the […]
Location https://download.vulnhub.com/breach/Breach-2_final2.1.zip Description Second in a multi-part series, Breach 2.0 is a boot2root/CTF challenge which attempts to showcase a real-world scenario, with plenty of twists and trolls along the way. The VM is configured with a static IP (192.168.110.151) so you’ll need to configure your host only adaptor to this subnet. Sorry! Last one with […]
Introduction When checking my twitter-feed there was a tweet from @Bill_Matthews with a reference to this site. Because I like a challenge, I had to participate. Like always I write up my findings to not only learn from the experience, but also in the hope it can help others. Location http://www.hackertest.net/ Description HackerTest.net is your own […]
Location https://download.vulnhub.com/pwnlab/pwnlab_init.ova Description Welcome to “PwnLab: init”, my first Boot2Root virtual machine. Meant to be easy, I hope you enjoy it and maybe learn something. The purpose of this CTF is to get root and read the flag. Difficulty: Low Flag: /root/flag.txt Enumeration nmap -T4 -sV -p- 192.168.110.2 It looks like 2 well-known ports and […]
Location https://www.vulnhub.com/entry/tophatsec-freshly,118/ Description The goal of this challenge is to break into the machine via the web and find the secret hidden in a sensitive file. If you can find the secret, send me an email for verification. 🙂 There are a couple of different ways that you can go with this one. Good luck! […]
Location https://www.vulnhub.com/entry/tophatsec-fartknocker,115/ Description New VM challenge that should be fun for people trying to get into packet analysis! Enumeration nmap -T4 -A -p- 192.168.110.4 PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.7 ((Ubuntu)) |_http-server-header: Apache/2.4.7 (Ubuntu) |_http-title: Site doesn’t have a title (text/html). When I visit the website, there is a reference to […]
Location https://www.vulnhub.com Description Based on the show, Mr. Robot. This VM has three keys hidden in different locations. Your goal is to find all three. Each key is progressively difficult to find. The VM isn’t too difficult. There isn’t any advanced exploitation or reverse engineering. The level is considered beginner-intermediate. Enumeration Mr. Robot is one […]
Location https://www.vulnhub.com Description Welcome to my third boot2root / CTF this one is called Sidney. The VM is set to grab a DHCP lease on boot. As before, gaining root is not the end of this VM. You will need to snag the flag, and being me, it’s never where they normally live… B-) If […]
Location vulnhub.com Description HOLY SCHNIKES! Tommy Boy needs your help! The Callahan Auto company has finally entered the world of modern technology and stood up a Web server for their customers to use for ordering brake pads. Unfortunately, the site just went down and the only person with admin credentials is Tom Callahan Sr. – […]
N13manT 