Good Enumeration Skills

Difficulty: Easy to Intermediate

Flag: 2 Flag first user And the second root

Learning: Web Application | Enumeration | Privilege Escalation

Web-site: www.hacknos.com

Contact-us

Twitter: @rahul_gehlaut

Difficulty: Intermediate

Learning: Web Application | Enumerate | Good Enumeration | Privilege Escalation

Overview:

Tested: VirtualBox/VMWare

Virtual Machine: - Format: Virtual Machine Virtualbox OVA

Networking: - DHCP Service: Enabled

twitter @rahul_gehlaut

• Goal - Get "user.txt" and "root.txt". You can also aim to get a root shell after getting "root.txt"
• Difficulty - Medium

A fun VM created to test your skills around docker, OSINT, and web application exploitation. It is recommended to run this VM with a network interface connected to the internet, however, it is not necessary in any way to accomplish the final goal.

Machine name: School

Level: Easy

flags: user, root

Description: This is a Linux box, running a Web Application, and a Windows application in WINE environment to give Access to Wine from Linux.

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me by email (fox at thebrain dot net) or Discord foxlox#1089

This is a vulnerable linux box focused on web application testing along with showing the importance of enumeration. There are three users you needs to compromise to read the root flag.

Difficulty: Easy-Medium

Recently, Good Tech Inc. has decided to change their application development process. However, their applications look broken and too basic. Is this an application full of snakeoil, or are they insecure too? This goes beyond PEN-200, and some web application development expertise could be helpful.

If you MUST have hints for this machine: SNAKEOIL is (#1): a hint by itself, (#2): full of disallowed methods, (#3): a single file full of problems.

This is a vulnerable linux box for testing your web application exploitation skills and you will learn basics of binary exploitation.