• Name: PRIMER: 1.0.1
• Date release: 15 Jan 2016
• Author: Arne Rick
• Series: PRIMER
• Web page: http://wiki.fablab-karlsruhe.de/doku.php?id=projekte:primer

• PRIMER.tar (Size: 640MB)
• Download: http://filehorst.de/download.php?file=bcGoHiHh
• Download (Mirror): https://download.vulnhub.com/primer/PRIMER.tar

         _         _            _        _   _        _            _
        /\ \      /\ \         /\ \     /\_\/\_\ _   /\ \         /\ \
       /  \ \    /  \ \        \ \ \   / / / / //\_\/  \ \       /  \ \
      / /\ \ \  / /\ \ \       /\ \_\ /\ \/ \ \/ / / /\ \ \     / /\ \ \
     / / /\ \_\/ / /\ \_\     / /\/_//  \____\__/ / / /\ \_\   / / /\ \_\
    / / /_/ / / / /_/ / /    / / /  / /\/________/ /_/_ \/_/  / / /_/ / /
   / / /__\/ / / /__\/ /    / / /  / / /\/_// / / /____/\    / / /__\/ /
  / / /_____/ / /_____/    / / /  / / /    / / / /\____\/   / / /_____/
 / / /     / / /\ \ \  ___/ / /__/ / /    / / / / /______  / / /\ \ \
/ / /     / / /  \ \ \/\__\/_/___\/_/    / / / / /_______\/ / /  \ \ \
\/_/      \/_/    \_\/\/_________/       \/_/\/__________/\/_/    \_\/

Installation

1) Run the OVA in a VM and connect to the webserver 2) Have Fun!

Made by

couchsofa

Thanks to

morbidick einball sarah

I would probably have never finished', this project without you guys ;)',

mostley

For hinting me to Erik Österberg's Terminal.js

0xBEEF

For providing fuel in the form of fudge and premium grilled goods

More information: http://wiki.fablab-karlsruhe.de/doku.php?id=projekte:primer

Motivation

A friend wanted to get into some simple exploits. I suggested starting out with web security, she was all for it. But when I started browsing vulnhub and the likes I couldn't find anything like I had in mind. So I wrote my own.

Concept

This is a story based challenge written in a style heavily inspired by Neil Stephensons Snow Crash and William Gibsons Sprawl Trilogy. Each chapter is unlocked by solving the puzzle. From hardcoded clear text javascript password checks, SQL-injections and cracking hashes to a simulated terminal. You only need to start the VM, a webserver will come up and you can connect with your browser. In fact you never have to leave the browser.

Goal

Teach some basic well known techniques and attacks. Spark some curiosity, make the user look at the source code and try to figure out what's going on behind the scenes. The main goal is to give a nice welcoming intro to the scene and hopefully also teach something about ethics and responsibility.

Change log

v1.0.1 - 2016-01-15: https://twitter.com/CouchSofa/status/688129147848138752 v1.0.0 - 2015-10-27: https://twitter.com/CouchSofa/status/659148660152909824

• Filename: PRIMER.tar
• File size: 640MB
• MD5: D0233F6D0FDE41A56925E8FEF29902CA
• SHA1: 5315D9856A1F52E491D65F10417015CB1986C60C

• Format: Virtual Machine (Virtualbox - OVA)
• Operating System: Linux

• DHCP service: Enabled
• IP address: Automatically assign

• 1 Feb 2017 - Primer Solution (mr_h4sh)
• 26 Aug 2016 - [PRIMER] – VulnHub #1 (nutellacracker)
• 27 Jul 2016 - Primer 1.0.1 Boot 2 Root (PentestingAndCTF)
• 30 Jun 2016 - Primer: 1.0.1 ~VulnHub (jhoss)
• 3 May 2016 - PRIMER 1.0.1 WRITEUP (UB3RSiCK)
• 20 Mar 2016 - PRIMER VulnHub Writeup (g0blin)
• 16 Mar 2016 - Vulnhub Primer boot2root walkthrough part 1 (Steve Campbell)
• 11 Mar 2016 - Pentest lab - Primer (chousensha)
• 1 Mar 2016 - Write Up: PRIMER 1.0.1 (forScience)
• 25 Feb 2016 - Primer 1.0.1 (techgaun)
• 20 Feb 2016 - PRIMER 1.0.1 (SQL injection) (f3ci)
• 14 Feb 2016 - Writeup of the PRIMER vm part 3 (mishaslavin)
• 11 Feb 2016 - Writeup of the PRIMER vm part 1 (mishaslavin)
• 11 Feb 2016 - Writeup of the PRIMER vm part 2 (mishaslavin)
• 19 Jan 2016 - PRIMER - 1.0.1 | Walkthrough by VavaTor (PDF) (VavaTor)
• 16 Jan 2016 - PRIMER 1 VM Walkthrough (misterch0c)