It is an OSCP-like VM, Medium Level difficulty.

This is an intermediate VM

THIS IS A MACHINE FOR COMPLETE BEGINNER , GET THE FLAG AND SHARE IN THE TELEGRAM GROUP (GROUP LINK WILL BE IN FLAG.TXT)

• DHCP : ENABLED
• IP : AUTO ASSIGN

The Presidential Elections within the USA are just around the corner (November 2020). One of the political parties is concerned that the other political party is going to perform electoral fraud by hacking into the registration system, and falsifying the votes.

The state of Ontario has therefore asked you (an independent penetration tester) to test the security of their server in order to alleviate any electoral fraud concerns. Your goal is to see if you can gain root access to the server – the state is still developing their registration website but has asked you to test their server security before the website and registration system are launched.

This CTF was created and has been tested with VirtualBox. It should also be compatible with VMWare and is DHCP enabled.

Rating: Medium/Hard - Enumeration is your friend

Welcome to "My Cmsms"

This VM has been designed by Pankaj Verma. Like its name, this box contains some interesting things about CMS. It has been designed in way to enhance user's skills while playing with some preveleges. Its a quite forward box but stay aware of rabbit holes.

Goal: Get the root flag of the target.

Difficulty: Easy to Intermediate

Need hints? Twitter @_p4nk4j

DHCP is enabled

Your feedback is really valuable for me! Twitter @_p4nk4j

Was there something that you didn’t like about this VM?

Please let me know so that I can make more interesting challenges in the future.

Good Luck..!!!

This is a fairly simple machine rated easy to intermediate. There is only one flag to capture root.txt.

This is an easy to intermediate box that shows you how you can exploit innocent looking php functions and lazy sys admins.

There are 4 flags in total to be found, and you will have to think outside the box and try alternative ways to achieve your goal of capturing all flags.

VM has been tested on VirtualBox 6.1.10 and VMWare (Fusion)

Enjoy! @theart42 and @4nqr34z

N/A

Machine name: BBS (Bulletin Board System)

Level: High

flags: user, root

Description: this machine is a dip in the present and in the past, it requires a transversal competence from today to the mid 80-90s. Skills: developing, networking, GSM Messaging, Linux, X11, some MS-DOS commands

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me on Hack the box (https://www.hackthebox.eu/profile/207673), by email ([email protected]) or Discord foxlox#1089

Machine hint: FUZZ!!!

Welcome to "GainPower: 01"

This is a Boot2Root challenge.

• Difficulty: Beginner to Intermediate
• Goal: Get the user and root flag
• DHCP: Enabled
• Warning: Be careful with "rabbit hole" !.

This VM is created and tested with VirtualBox

Need hints? Twitter @VanshalG

Your feedback is really valuable to me! Twitter @VanshalG

Was there something that you didn’t like about this VM?

Please let me know so that I can make more interesting challenges in the future.

Good Luck..!!!

Welcome to the agency! Here we look only for the best of the best.

Do you think you got what it takes? Then step up and show us what you got!

This is a Boot2Root challenge. The final goal is to take the flag in /root.

This VM is created and tested with VMWare, but Vbox also should work just fine.

                                                                            
          .&&&&&&&%%&&&                                                     
       #&&%&%%%%%%%%%%%&&&(                                                 
     #&%%&%&%&%&%&%&%&%&%%&&(                                               
    &&&%%%%%%%&(..#&&&%%%%%&&&                                              
   #%&%&%&&&/        (&&&&%&&&*                   %&%&%&%%&&@*              
   %&%%%%%&&          &&%%%&%%#               (&&&&%%%%%%%%%%%&&&           
   (%&%&%&&%%        %%&%&%&%%,             %&&&%&%&%&&&%&%&%&%&%&&.        
    %%%%%%%%%&%&(#&%%%%%%%%%&#             &&%%%%%%%&&#/(%%&%&%%%%%&(       
     *&%%&%&%&%&%%&&%&%&%&&%.             #&%&%&%&&,        &%%&%&%&&.      
       .&&&%%%%%%%%%%%%%%%                &&&%%%%%&          %%%%%%%&/      
           ,%&%&%&%%%#,                   #&%&%&%&&*        &&%&%&%%&.      
            .&%%%%%&&.                     &&%%%%%%&%&(*/%&&%&%%%%%&(       
            .&%&%&%&&.                      %&&%%&%&%&%&%&%&%&%&&%%.        
            .&%%%%%&&.                        (&&%&%%%%%%%%%%%&&&           
            .&%&%&%&&.      gitroot by          .#&&&%&%&%&&*              
            .%%%%%%&&.      RECURSIVENULL         &%%%%%%&@               
            .&%&%&%%%.                              %&%&%&%%/               
            .&%%%%%%%(                             &&%%%%%%&                
            .&%&%&%&%&&                         #&&&%&%&&&&                 
            .%%%%%%%%%&%&&&&&&%%&&&&&&&&&&&%&%&&%%%%%%%%%&                  
          .%&&%&%&%&%&%&%&%&%&%&%&%&%&%&%&%&%&%&%&%&%&&&                    
       %%&%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%&&%&&&&/                       
     &%%%&%&%&%&%&%&%&%&%&%&@@&&&&%#((/*,,..                                
   .&%%%%%%%&%&(*/&%%%%%%%%%%.                                              
   &%&%&%&%&         &%&%&%&&&                                              
   &%%%%%%&*         *%%%%%&&&                                              
   &&&%&%&&&         &%&%&%&%&                                              
   ,%%%%%%%&&%&(/#&%%&%%%%%%%.                                              
     &&&%&%&%&%&%&%&%&%&%&&&                                                
       &%&%%%%%%%%%%%%%&&&                                                  
          ,&%&&%&&&%%&.

The theme of this box is git.

The design of this box is HTB-like.

I will NOT be giving hints. Like a wise man once said "Try Harder"

Goals:

• Get a low privilege shell and read /home/pablo/user.txt
• Get a root shell and read /root/root.txt

Difficulty: Intermediate

This box only works on VirtualBox

DHCP is enabled

All of the users on this box are named after my teachers and mentors, thank you Pablo, Beth, and Jen.

Have Fun!