About Release:

• Name: AI: Web 2.0
• Author: Mohammad Ariful Islam
• Series: AI: Web

Description:

• Difficulty: Intermediate
• Network: DHCP (Automatically assign)
• Network Mode: NAT

This is the second box from the series AI: Web and you will have more fun to crack this challenge. The goal is simple. Get flag from /root/flag.txt. Enumerate the box, get low privileged shell and then escalate privilege to root.

You may need to crack password. Use wordlist SecLists/rockyou-45.txt by Mr. Daniel Miessler.

For any hint please tweet on @arif_xpress

File Information:

• Filename: AI Web 2.0.7z
• File size: 906 MB

Virtual Machine:

• Tested: VMWare Workstation 10 or later.
• Operating System: Linux

Networking:

• DHCP service: Enabled
• IP Address: Automatically assign

DC-8 is another purposely built vulnerable lab with the intent of gaining experience in the world of penetration testing.

This challenge is a bit of a hybrid between being an actual challenge, and being a "proof of concept" as to whether two-factor authentication installed and configured on Linux can prevent the Linux server from being exploited.

The "proof of concept" portion of this challenge eventuated as a result of a question being asked about two-factor authentication and Linux on Twitter, and also due to a suggestion by @theart42.

The ultimate goal of this challenge is to bypass two-factor authentication, get root and to read the one and only flag.

You probably wouldn't even know that two-factor authentication was installed and configured unless you attempt to login via SSH, but it's definitely there and doing it's job.

Linux skills and familiarity with the Linux command line are a must, as is some experience with basic penetration testing tools.

For beginners, Google can be of great assistance, but you can always tweet me at @DCAU7 for assistance to get you going again. But take note: I won't give you the answer, instead, I'll give you an idea about how to move forward.

Wordy is design for beginners to experience real life Penetration testing. This lab is completely dedicated to Web application testing and there are several vulnerabilities that should be exploited in multiple ways. Therefore, it is not only intended as a root challenge boot, the primary agenda is proactive in exploiting tops listed web application vulnerabilities.

As this is a wordpress based lab, it is designed so that users can practice following vulnerabilities: - LFI - RFI - CSRF - File Upload - SQL

There is a total of 3 flags. Completion is only registered on exploiting all vulnerabilities and flags.

Hint: “Everything is not what it seems to be.”

Visit our website http://hackingarticles.in

• Level: Beginner-Intermediate
• User flag: user.txt
• Root flag: root.txt
• Description: The machine is VirtualBox compatible but can be used in VMWare as well (not tested but it should work). The DHCP will assign an IP automatically. You have to find and read two flags (user and root) which is present in user.txt and root.txt respectively. Enjoy pwning it!

Mission: Millionaire psychopath Max Zorin is a mastermind behind a scheme to destroy Silicon Valley in order to gain control over the international microchip market. Get root and stop this madman from achieving his goal!

• Difficulty: Intermediate
• Flag is /root/flag/flag.sh
• Use in VMware. DHCP enabled.
• Learning Objectives: Web Application Security, Scripting, Linux enumeration and more.

Difficulty : Intermediate

Flag : boot-root

Learing : exploit | web application Security | Privilege Escalation

Contact .. https://www.linkedin.com/in/rahulgehlaut/

The Dhanush once was the pinnacle of the weapons technology. It redefined the warfare to a new level and is mentioned in all the Mythological Accounts in the History.

Choose Your Dhanush,

Stretch the string and Shoot for Root!!

ENUMERATION IS THE KEY!!!!!

• Level: Intermediate-Hard
• User flag: user.txt
• Root flag: root.txt
• Description: It's a Boot2Root machine. The machine is VirtualBox compatible but can be used in VMWare as well (not tested but it should work). The DHCP will assign an IP automatically. You have to find and read two flags (user and root) which is present in user.txt and root.txt respectively. Enjoy pwning it!

• Level: Beginner-Intermediate
• flags: user.txt and root.txt
• Description: The machine is VirtualBox as well as VMWare compatible. The DHCP will assign an IP automatically. You'll see the IP right on the login screen. You have to find and read two flags (user and root) which is present in user.txt and root.txt respectively.
• Format: Virtual Machine (Virtualbox - OVA)
• Operating System: Linux

Difficulty : Easy to Intermediate

Flag : 2 Flag first user And second root

Learning : exploit | Web Application | Enumeration | Privilege Escalation

Website : www.hackNos.com

mail : [email protected]

Difficulty : Intermediate

Flag : Need to get root to read flag (root.txt)

Learning : Exploit | Web Application | Digital Forensics | Enumeration | Privilege Escalation

DHCP enabled

Welcome to Fsoft Hacking Labs !

If during boot, you notice Apache error. Please wait one minute then reboot. Labs are designed to destroy themselves when you exploit them incorrectly - Please create a snapshot of yourself.

Good luck to you as well !

Akasafe Team - FSOFT

Difficulty : Easy to Intermediate

Flag : 2 Flag first user And second root

Learning : Web Application | Enumeration | Password Cracking