This is my first CTF. This CTF for beginners level based WordPress.

This VM is given as challenge 3 in InfoSecWarrior CTF 2020.

Official website : https://www.infosecwarrior.com/

This box is dedicated to my mentors (you will find there names in the box itself)

If you face any error or needed help ping me on Twitter CyberKnight00

Or ping them after finding their names.

During the CTF event, this box contains a Loot box (zip file) consist of download link of the next Challenge and super_flag.txt.

Goal : You have to gain highest privileges and collect only 2 flags (user flag and root flag). loot box is not available in this VM.

The WordPress developer configured the machine to work internally. But due to some miss-configuration wordpress is exposed to outside world. Use your skills and get the root flag.

BTW someone already hacked the box and placed his backdoor find it. It will help you.

Welcome to "Wordpress Host Server"

This VM consists of a "Wordpress Website" which is specially made for learning and sharpening Wordpress Enumeration and Exploitation skills. The Website contains 40+ vulnerabilities which can compromise the security of the website.

Goal: Try to find out as much as vulnerabilities you can exploit. This time our goal is not to get the root but to practice more.

Difficulty: Intermediate Level

Need hints? Twitter @akankshavermasv

DHCP is enabled

Note : If you are unable to browse the web page properly then add the hostname of web in /etc/hosts file.

Your feedback is really valuable for me! Twitter @akankshavermasv

Was there something that you didn’t like about this VM?

Please let me know so that I can make more interesting challenges in the future.

Good Luck..!!!

Welcome to ColddBox Easy, it is a Wordpress machine with an easy level of difficulty, highly recommended for beginners in the field, good luck! Please share your feedback: "https://twitter.com/C0ldd__”

VPLE (Vulnerable Pentesting Lab Environment)

• username:- administrator
• password:- password

VPLE is an intentionally vulnerable Linux virtual machine. This VM can be used to conduct security training, test security tools, and practice common penetration testing Labs. In VPLE bunch of labs Available. (only run in VMWare Pls Don’t run in VirtualBox)

List Of All Labs:-

• Web-dvwa (eg.123.123.123.123:1335/)
• Mutillidae (eg.123.123.123.123:1336/)
• Webgoat (eg.123.123.123.123:1337/WebGoat/)
• Bwapp (eg.123.123.123.123:8080/install.php & 123.123.123.123:8080/install.php )
• Juice-shop (eg.123.123.123.123:3000/)
• Security-ninjas (eg.123.123.123.123:8899/)
• Wordpress (eg.123.123.123.123:8800/)