'hackme2' is a medium difficulty level box. This is the second part of the hackme series where more controls are in place do deter malicious attacks. In addition, you will have to think out of the box to exploit the vulnerabilites. The goal is to gain limited privilege access via web vulnerabilities and subsequently, privilege escalate as a root user. The lab was created to mimic real world web vulnerabilities.

'hackme2' uses DHCP and in the possible event that the mysqld shuts down on its own (very rare cases), attempt to force restart the machine and it should be working fine subsequently.

LinEsc is a machine built to demonstrate the 7 most common ways of Linux privilege escalation.

Target: get root privileges with 7 different ways.

Default credentials : (muhammad:nasef)

Machine name: Callme

Level: Easy

flags: user, root

Description: This is a Linux box with a custom remote access

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me by email (fox at thebrain dot net) or Discord foxlox#1089

Machine name: Netstart

Level: Easy

flags: user, root

Description: This is a Linux box, running a WINE Application vulnerable to Buffer Overflow, escalation is pretty simple

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me by email (fox at thebrain dot net) or Discord foxlox#1089

Machine name: School

Level: Easy

flags: user, root

Description: This is a Linux box, running a Web Application, and a Windows application in WINE environment to give Access to Wine from Linux.

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me by email (fox at thebrain dot net) or Discord foxlox#1089

Google && Wikipedia Is Your Friend

Difficulty: easy

"how the little pigs will scream when they know how the boar suffered"

Pls, add /etc/hosts -> ip vm + armbjorn

Twitter: @ArmBjorn

Work in Virtualbox.

Get root permissions

Go deeper than just the typical exploit.

Google Is Your Friend

Difficulty: Begginer

"Remember using 'strings'"

Twitter: @ArmBjorn

Work in Virtualbox.

Get root permissions

The evil Bellatrix Lestrange has escaped from the prison of Azkaban, but as ... Find out and tell the Minister of Magic

Difficult: Medium

This works better in VirtualBox

Hints --> Brute force is not necessary, unless it is required. ncat is the key ;)

Social-Media: Twitter --> @BertrandLorent9, Instagram --> @BertrandLorente9

Description

Welcome to Moomin's World, one of the best cartoons from the 90's in Nepal. In order to solve this box you require knowledge about the linux command, basic penetration testing along with the tools required during pentesting. Side-by knowledge about the linux process or daemon with some OSINT might come handy and the last part will be some basic concept of Binary Exploitation and the tools required to get your things done. Here you will have to find the total of four flags to become root.

Difficulty level:

It depends upon the skill you have.

Contact

This is my first vulnerable machine. Your feedback is most welcome and really appreciated. You can contact me via twitter and instagram @gr4n173.

Will you be able to compromise the internal server of the CYBOX company?

Difficulty: Medium

Objective: Get user.txt and root.txt

This works better with VirtualBox rather than VMware.

Contact: @takito1812

Custom Exploitation, Code Analysis, Crypto, Programming Skills

Mission : Find the alien boss

Based on : Java

Difficulty : Hard

Recommended : Give a try without the walkthrough

Info : Created and Tested in Virtual box (NAT network)