This is our tribute to the Indian Space Research Organisation (ISRO). We as Indians are proud of ISRO and its achievements. Solve this CTF challenge and feel the work of ISRO.

This machine contains 4 different flags to test your skills.

1. Aryabhata
2. Bhaskara
3. Mangalyaan
4. Chandrayaan 2

ENUMERATION IS THE KEY!!!!!

Advanced-Hard Boot2Root machine intended to be used in a Workshop/CTF beside Shellmates Club.

The machine has 6 flags that will guide the challenger through it.

It covers web security, binary exploitation, and various misconfigurations.

• LinkedIn: https://www.linkedin.com/in/hafidh-zouahi-b95373132/
• e-mail: gh_zouahi at esi dot dz

Bob’s Missing Cat is a three part CTF where the goal is to find your lost cat.

Bob’s Missing Cat Pt. 1 is an introduction to the world of Linux.

(This CTF is different from most, intended to be played out more like a story.)

Types of Commands learned by the end of Pt. 1: cd, ls, ls -la, pwd, cat, mkdir, mv, nano, chmod, etc.

Please do Bob’s Missing Cat Pt. 1 alongside the BMCInstrictable document.

Download ~ https://download.vulnhub.com/bobsmissingcat/BMCInstructable.docx

Its a CTF machine that deals with the history of gears of war, where we must try to escape from prison and obtain root privileges. it has some rabbit holes, so you have to try to connect the tracks to get access.

Difficulty : Intermediate

Flag : boot-root

Learing : exploit | web application Security | Privilege Escalation

Contact .. https://www.linkedin.com/in/rahulgehlaut/

Tempus Fugit is a Latin phrase that roughly translated as “time flies”.

This is an hard, real life box, created by @4nqr34z and @theart42 to be used as a CTF challenge on Bsides Newcastle 23. november 2019 and released on Vulnhub the same day.

In Tempus Fugit 3, the idea is still, like in the first two challenges; to create something “out of the ordinary”.

The vm contains 5 flags. If you don’t see them, you are not looking in the right place...

Need any hints? Feel free to contact us on Twitter: @4nqr34z or @theart42

DHCP-Client.

Tested both on Virtualbox and vmware

Health warning: For external use only

Plot

The Stheno Corporation are planning to cause a doomsday event using an unknown doomsday device within the next 12 hours, are you able to stop them dead in their tracks?

Your Goal

Stop the doomsday from occuring by disabling the doomsday devices created by The Stheno Corporation. Once you have succeeded you can retrieve your flag from http://192.168.56.105/flag.php

================ !!! IMPORTANT !!! ================

There are two vms that need to be powered on at the same time you cannot have one open while the other is offline

The vms must be on a host-only network and must be able to use the following ips (default settings for virtualbox):

• 192.168.56.105
• 192.168.56.107

Settings for virtualbox: - IPv4 Address: 192.168.56.1 - IPv4 Netmask: 255.255.255.0

DHCP:

• Server Addr: 192.168.56.100
• Server Mask: 255.255.255.0
• Lower Addr Bound: 192.168.56.101
• Upper Addr Bound: 192.168.56.254

This must be setup as there are strict firewall rules on the vms

Do not worry if you cannot reach 192.168.56.107 from the host pc this is intended

Mordor-CTF

• Author: strider
• Testers: Kyubai
• Difficulty: Intermediate

Mordor CTF is a CTF-Machine with a nice story.

This VM has a small touch of lord of the rings. And tells a story during part 2 of the movies.

In this VM are 9 flags to get.

This I my first VM i've created, I hope you enjoy it.

The goal is to reach the root and readout the file /root/flag.txt

If you found other ways, to reach the goal, let me know :)

What include this VM?

• Information Gathering
• Enumerarion
• Cracking
• Webexploitation
• Reverse Engineering
• Binary Exploitation
• General Linux skills
• and more...

OS:

• Debian 10 Buster
• IPv4 / DHCP Autoassign

For any hints contact me here [strider007 at protonmail dot com]

If you found Bugs or you have problems with the VM, you can contact me also here [strider007 at protonmail dot com]

Disclaimer

This VM is completely licensed under Creative Commons v3. except the elements by LOTR.

I do not own the characters and the elements of LOTR. They was used for the fanfiction story during the CTF. I do not earn money with this machine and all the other elements of this machine.

If you use parts of this machine please ensure that you remove all LOTR elements.

This machine is designed by keeping in mind about all the beginners who wants to start their journey in CTF challenges.

This machine doesn't require any prior knowledge about different web vulnerabilities.

Privilege escalation is the Key!

This machine has 3 flags. Each flag is present in home directory.

You must know some basic linux commands to pawn this machine.

Technical Information

• Machine is based on Ubuntu 64bit
• Tested on virtualBox
• DHCP is enabled (set as bridged networking)

Installation

Unzip it and then import it into virtualBox

Contact

If you have solved this machine in an unintended way then please let us know,you may get a chance to publish your writeup on our website. website link : https://www.haclabs.org

This is the first in our collaborative series. This machine has 3 flags and requires a combination of traffic analysis, linux priv esc, and some outside the box CTF thinking.

Technical Info:

• Ubuntu 64bit
• Tested on virtualBox
• DHCP should be enabled (set as bridged networking)

I have created this amazing CTF for pentester. However, This is not like other CTF which has been using common exploits and tools. Instead, you will learn about Real-world website testing methodology, advance injections and more.

This is my first CTF. This CTF for beginners level based WordPress.