Difficulty: easy/medium

After the last breach, The Shuriken Company decided to move and rebuild its infrastructure. This time using different technology, and assuring us it's gonna be secure. Will it be so? It's up to you to prove otherwise.

My main focus is to not make the machines typical CTF like riddles but at least a bit more realistic. Remember it's a custom machine after all.

This machine was tested with VirtualBox.

See you in the root.

Hint: For the foothold, it's important to understand the technology behind the web app and how it handles user input.

This Box is all about enumeration. Basic web app test and linux environment test. If you have basic knowledge about handling tools you will root it in a days

Happy Hacking :)

This is a vulnerable linux box focused on web application testing along with showing the importance of enumeration. There are three users you needs to compromise to read the root flag.

Difficulty: Easy-Medium

VPLE (Vulnerable Pentesting Lab Environment)

• username:- administrator
• password:- password

VPLE is an intentionally vulnerable Linux virtual machine. This VM can be used to conduct security training, test security tools, and practice common penetration testing Labs. In VPLE bunch of labs Available. (only run in VMWare Pls Don’t run in VirtualBox)

List Of All Labs:-

• Web-dvwa (eg.123.123.123.123:1335/)
• Mutillidae (eg.123.123.123.123:1336/)
• Webgoat (eg.123.123.123.123:1337/WebGoat/)
• Bwapp (eg.123.123.123.123:8080/install.php & 123.123.123.123:8080/install.php )
• Juice-shop (eg.123.123.123.123:3000/)
• Security-ninjas (eg.123.123.123.123:8899/)
• Wordpress (eg.123.123.123.123:8800/)

Recently, Good Tech Inc. has decided to change their application development process. However, their applications look broken and too basic. Is this an application full of snakeoil, or are they insecure too? This goes beyond PEN-200, and some web application development expertise could be helpful.

If you MUST have hints for this machine: SNAKEOIL is (#1): a hint by itself, (#2): full of disallowed methods, (#3): a single file full of problems.

This is a vulnerable linux box for testing your web application exploitation skills and you will learn basics of binary exploitation.