A VERY beginner friendly box with a LOT of hand holding.

Once the system grabs an IP, head straight to the web port before scanning.

You will find your first set of instructions which starts the guided process.

Created in Virtualbox.

Goal: Get the root flag.

Your feedback is appreciated -- Twitter: @iamv1nc3nt

This is a solid intermediate box.

You get one hint -- enumerate the box, then enumerate the box differently.

Created in Virtualbox.

Goal: Get the root flag.

Your feedback is appreciated -- Twitter: @iamv1nc3nt

• Goal - Get "user.txt" and "root.txt". You can also aim to get a root shell after getting "root.txt"
• Difficulty - Medium

A fun VM created to test your skills around docker, OSINT, and web application exploitation. It is recommended to run this VM with a network interface connected to the internet, however, it is not necessary in any way to accomplish the final goal.

Easy level Linux box.

This box "dev" aims to educate people on common and misconfigurations of a widely used developer tool.

Use a good wordlist!

Feedback is appreciated - [email protected]

Send me your writeups, and let me know if you want it advertised on my website: www.cybergoat.co.uk

This is an easy->intermediate boot2root with a mix of real world and ctf. Created in Virtualbox. Goal: Get the root flag. Your feedback is appreciated -- Twitter: @iamv1nc3nt

Goal : Get user and root flag

Difficulty : Intermediate / Hard

Description : Some of us hold on to poems, songs, movies, books. I guess people can't hold onto people anymore. -- Oguz Atay

You know what you have to do. If you get stuck, you can get in touch with me on Twitter. @arslanblcn_

This machine works properly on Virtualbox.

Happy hacking :)

• Difficulty: Intermediate to Hard
• Goal: Get the root shell and read all the 3 flags.
• Information: You need some good encryption and programming skills to root this box. Please solve this challenge by using only the intended way, any unintended way will not be apprecitated.
• If you need any hints, you can contact us on Twitter (@infosecarticles)

Description

Welcome to Moomin's World, one of the best cartoons from the 90's in Nepal. In order to solve this box you require knowledge about the linux command, basic penetration testing along with the tools required during pentesting. Side-by knowledge about the linux process or daemon with some OSINT might come handy and the last part will be some basic concept of Binary Exploitation and the tools required to get your things done. Here you will have to find the total of four flags to become root.

Difficulty level:

It depends upon the skill you have.

Contact

This is my first vulnerable machine. Your feedback is most welcome and really appreciated. You can contact me via twitter and instagram @gr4n173.

Machine name: School

Level: Easy

flags: user, root

Description: This is a Linux box, running a Web Application, and a Windows application in WINE environment to give Access to Wine from Linux.

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me by email (fox at thebrain dot net) or Discord foxlox#1089

Machine name: Netstart

Level: Easy

flags: user, root

Description: This is a Linux box, running a WINE Application vulnerable to Buffer Overflow, escalation is pretty simple

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me by email (fox at thebrain dot net) or Discord foxlox#1089

Difficulty: Easy

Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root).

Information: Your feedback is appreciated - Email: [email protected]

Tested: VMware Workstation 16.x Pro (This works better with VMware rather than VirtualBox)

Difficulty: easy/medium

After the last breach, The Shuriken Company decided to move and rebuild its infrastructure. This time using different technology, and assuring us it's gonna be secure. Will it be so? It's up to you to prove otherwise.

My main focus is to not make the machines typical CTF like riddles but at least a bit more realistic. Remember it's a custom machine after all.

This machine was tested with VirtualBox.

See you in the root.

Hint: For the foothold, it's important to understand the technology behind the web app and how it handles user input.