Nataraj is a dancing avatar of Hindu God Shiva. His dance is called Tandava and it is only performed when he is most angry. Whoever interrupts his dance dies by Shiva while dancing. This is a Boot2Root challenge. Based on Nataraja. You only have to root the machine and find the root flag! All the best!

• Machine Name: Zion: 1
• Difficulty: Beginner to Intermediate
• Tested: VMware Workstation 14.x Pro (This works better with VMware rather than VirtualBox)
• DHCP Enabled
• Goal: Read the /home/{same_user}/flag.txt file. The flag location information will be displayed as soon as you get internal access to the server. There is more than one way to access the server and read the final flag, so feel free to try the method you prefer. Everything will depend on the correct choice.
• Message: Help Morpheus to leave the Matrix and return to Zion.
• Warning: Be careful not to fall into a "rabbit hole" :D.
• Information: Your feedback is appreciated - Twitter: @mrhenrike

Welcome to the agency! Here we look only for the best of the best.

Do you think you got what it takes? Then step up and show us what you got!

This is a Boot2Root challenge. The final goal is to take the flag in /root.

This VM is created and tested with VMWare, but Vbox also should work just fine.

Title: Glasgow Smile

• Users: 5
• Difficulty Level: Initial Shell (Easy) - Privileges Escalation (Intermediate)
• Hint: Enumeration is the key.

If you are a newbie in Penetration Testing and afraid of OSCP preparation, do not worry. Glasgow Smile is supposed to be a kind of gym for OSCP machines.

The machine is designed to be as real-life as possible. Anyway, You will find also a bunch of ctf style challanges, it's important to have some encryption knowledge.

You need to have enough information about Linux enumeration and encryption for privileges escalation.

About the VM:

Just download, extract and load the .vmx file in VMware Workstation (tested on VMware Workstation 15.x.x)

The adapter is currently NAT, networking is configured for DHCP and IP will get assigned automatically

Contact:

You can contact me on Hack the box (https://www.hackthebox.eu/profile/232477) or by email ([email protected]) for hints!

• Level: Intermediate
• flags: root.txt
• Description: The machine is VirtualBox as well as VMWare compatible. The DHCP will assign an IP automatically. You'll see the IP right on the login screen. You have to read the root flag.

Welcome to "GainPower: 01"

This is a Boot2Root challenge.

• Difficulty: Beginner to Intermediate
• Goal: Get the user and root flag
• DHCP: Enabled
• Warning: Be careful with "rabbit hole" !.

This VM is created and tested with VirtualBox

Need hints? Twitter @VanshalG

Your feedback is really valuable to me! Twitter @VanshalG

Was there something that you didn’t like about this VM?

Please let me know so that I can make more interesting challenges in the future.

Good Luck..!!!

Machine name: BBS (Bulletin Board System)

Level: High

flags: user, root

Description: this machine is a dip in the present and in the past, it requires a transversal competence from today to the mid 80-90s. Skills: developing, networking, GSM Messaging, Linux, X11, some MS-DOS commands

Author: foxlox

About VM: VirtualBox ready, the adapter is currently Bridged, DHCP active

You can contact me on Hack the box (https://www.hackthebox.eu/profile/207673), by email ([email protected]) or Discord foxlox#1089

Machine hint: FUZZ!!!

This is an easy to intermediate box that shows you how you can exploit innocent looking php functions and lazy sys admins.

There are 4 flags in total to be found, and you will have to think outside the box and try alternative ways to achieve your goal of capturing all flags.

VM has been tested on VirtualBox 6.1.10 and VMWare (Fusion)

Enjoy! @theart42 and @4nqr34z

This is a fairly simple machine rated easy to intermediate. There is only one flag to capture root.txt.

Welcome to "My Cmsms"

This VM has been designed by Pankaj Verma. Like its name, this box contains some interesting things about CMS. It has been designed in way to enhance user's skills while playing with some preveleges. Its a quite forward box but stay aware of rabbit holes.

Goal: Get the root flag of the target.

Difficulty: Easy to Intermediate

Need hints? Twitter @_p4nk4j

DHCP is enabled

Your feedback is really valuable for me! Twitter @_p4nk4j

Was there something that you didn’t like about this VM?

Please let me know so that I can make more interesting challenges in the future.

Good Luck..!!!

Description:Here is another box in which i have been working for a while now. Hope you enjoy it.

Difficulty:Intermediate

It is recommended to run this machine in VirtualBox.

The Presidential Elections within the USA are just around the corner (November 2020). One of the political parties is concerned that the other political party is going to perform electoral fraud by hacking into the registration system, and falsifying the votes.

The state of Ontario has therefore asked you (an independent penetration tester) to test the security of their server in order to alleviate any electoral fraud concerns. Your goal is to see if you can gain root access to the server – the state is still developing their registration website but has asked you to test their server security before the website and registration system are launched.

This CTF was created and has been tested with VirtualBox. It should also be compatible with VMWare and is DHCP enabled.

Rating: Medium/Hard - Enumeration is your friend