Welcome to "Shenron-1"

This is the first machine of shenron series...

Goal: Get two flags..

Difficulty : Beginner to Intermediate

Need hints? Twitter @shubhammandloi

Works better with VirtualBox rather than VMware

Your feedback is really valuable for me! Twitter @shubhammandloi

Can you become the new Kazekage? Look in the root flag! :)

Difficulty: easy/medium

After the last breach, The Shuriken Company decided to move and rebuild its infrastructure. This time using different technology, and assuring us it's gonna be secure. Will it be so? It's up to you to prove otherwise.

My main focus is to not make the machines typical CTF like riddles but at least a bit more realistic. Remember it's a custom machine after all.

This machine was tested with VirtualBox.

See you in the root.

Hint: For the foothold, it's important to understand the technology behind the web app and how it handles user input.

Difficulty

Easy

Details

It's a very simple, beginner level, "The Office" themed CTF machine. Created and tested with VirtualBox. This box will assign itself an IP address through DHCP. You shouldn't have to configure anything else.

Goals

There are 8 flags in total. Collect them all and get root access to defuse the Doomsday Device.

Story

Dwight Schrute devised a system (called the Doomsday Device) to find mistakes made by employees in the office. It will forward incriminating emails to Robert California if employees make five mistakes in one day, effectively causing them to lose their jobs. Your goal is to find your way into the system and save everyone's job by getting root access.

Power is dangerous, attracts the worst, corrupts the best

Do not give up

Difficulty: easy to intermediate

pls add /etc/hosts ip + armbjorn

Twitter: @ArmBjorn

Work in Virtualbox.

Get root permissions

get flags

difficulty: easy

about vm: tested and exported from virtualbox. dhcp and nested vtx/amdv enabled. you can contact me by email (it should be on my profile) for troubleshooting or questions.

Get two flag

Difficulty : easy

Difficulty: Easy

Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root).

Information: Your feedback is appreciated - Email: [email protected]

Tested: VMware Workstation 16.x Pro (This works better with VMware rather than VirtualBox)

• Difficulty: Easy/Intermediate
• Flag: 2 (User and root)
• Hint: Enumeration

Chill Hack is a simple machine which provides common and real world vulnerabilities (tested on VMware Workstation 15).

Make sure not to give to less resources while running it.

Your feedback is really valuable, do let me know so that I can make more interesting challenges.

Good Luck..!!

The company Aquarium Life S.L. has contacted you to perform a pentest against one of their machines. They suspect that one of their employees has been committing fraud selling fake tickets. They want you to break into his computer, escalate privileges and search for any evidences that proves this behaviour.

ZIP Password: EsSabad0!

Extra information:

• The suspicious username is Squiddie.
• He was in charge of the ticket selling for the Aquarium.
• Ethernet settings set to NAT with DHCP enabled.
• You should find the IP in your VLAN.

The idea of the machine it is not just to gain root privileges but obtaining all the evidences to prove that the user was commiting fraud.

Difficulty: I would say the machine is Medium regarding gaining root privileges. If we consider all the steps to obtain the evidences, Hard.

DevGuru is a fictional web development company hiring you for a pentest assessment. You have been tasked with finding vulnerabilities on their corporate website and obtaining root.

OSCP like ~ Real life based

Difficulty: Intermediate (Depends on experience)

Difficulty: Easy

Odin ventured to the Well of Mimir, near Jötunheim, the land of the giants in the guise of a walker named Vegtam. Mímir, who guarded the well, to allow him to drink from it, asked him to sacrifice his left eye, this being a symbol of his will to obtain knowledge

Pls, add /etc/hosts -> ip vm + odin

example: 192.168.1.1 odin

Twitter: @ArmBjorn

Work in Virtualbox.

Get root permissions