Nully Cybersecurity - this is an easy-intermediate realistic machine.

While working with the machine, you will need to brute force, pivoting (using metasploit, via portfwd), exploitation web app, and using searchsploit.

About: Wait 5-8 minutes before starting for the machine to start its services. Also, check the welcome page on port 80.

Hints: 'cat rockyou.txt | grep bobby > wordlist' for generating wordlist.

Story: You are a Professional White Hat. Small company Nully Cybersecurity hired you to conduct a security test of their internal corporate systems.

Feedback. https://twitter.com/laf3r_

Difficulty: Easy-intermediate

• Goal: 2 flagas
• Difficulty: Easy-intermediate
• Information: Your feedback is appreciate:
• Twitter: @0x04E1

Lets separate the script-kids from script-teenies.

Hint: The first impression is not always the right one!

If you need hints, call me on twitter: @0815R2d2 Have fun...

This works better with VirtualBox rather than VMware

Groundhog Day: Boot2Root !

Initial footstep is a bit flowed, but really not difficult.

After getting access to Funbox: CTF, its nessesarry to find, read and understand the (2 and easy to find) hints.

Be smart and combine...

Hints: Nikto scans "case sensitive" and you need a minimum of 15 mins to get user !

If you need hints, call me on twitter: @0815R2d2

Have fun...

This works better with VirtualBox rather than VMware

Difficulty: Easy

Mercury is an easier box, with no bruteforcing required. There are two flags on the box: a user and root flag which include an md5 hash. This has been tested on VirtualBox so may not work correctly on VMware. Any questions/issues or feedback please email me at: SirFlash at protonmail.com

• Difficulty: Medium
• Tested: VMware Workstation 15.x Pro (This works better with VMware rather than VirtualBox)
• Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root).
• Information: Your feedback is appreciated - Email: [email protected]

The VM is very interesting as this is made in the remembering of yuvraj singh who hit "6" sixes which turned the table of the game. There are 6 flags and each flag will lead to another flag and in the end it will lead to root access which will end the game.

• Machine Level : Easy
• Description : ENUMERATION ENUMERATION and ENUMERATION! This VM is running on VirtualBox. And has 2 flags:user.txt and flag.txt.

Hang Tuah was a warrior who lived in Malacca during the reign of Sultan Mansur Shah in 15th century. He was supposedly the most powerful of all the laksamana or admirals and is considered by the Malays to be one of history's greatest silat masters.

• Difficulty: Easy
• Tested: VMware Workstation 15.x Pro (This works better with VMware rather than VirtualBox)
• Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root).
• Information: Your feedback is appreciated - Email: [email protected]

This is an easy box.

It's vmware based, i dont know if it works on VB you can test it if you want.

There are 2 flags under /home/$user/user.txt & /root/root.txt.

No stupid ctfy/guessy stuff.

Remember: your goal is to read the root flag, not just to take a root shell. Feel free to DM me on discord for any tip/hint.

Happy pwning! :D

A web hosting provider has asked you to test their security. Can you find the vulnerabilities on their server and gain root access? If anyone wants to submit a written report for this, I’d give it a read and potentially publish it on this blog!