This boot2root is a linux based virtual machine and has been tested using VMware workstation.

Goal: Get the root shell and then obtain flag under: /root/(flag.txt).

For any query contact me at: chandramanish900 at gmail dot com

About Release:

• Name: AI: Web 2.0
• Author: Mohammad Ariful Islam
• Series: AI: Web

Description:

• Difficulty: Intermediate
• Network: DHCP (Automatically assign)
• Network Mode: NAT

This is the second box from the series AI: Web and you will have more fun to crack this challenge. The goal is simple. Get flag from /root/flag.txt. Enumerate the box, get low privileged shell and then escalate privilege to root.

You may need to crack password. Use wordlist SecLists/rockyou-45.txt by Mr. Daniel Miessler.

For any hint please tweet on @arif_xpress

File Information:

• Filename: AI Web 2.0.7z
• File size: 906 MB

Virtual Machine:

• Tested: VMWare Workstation 10 or later.
• Operating System: Linux

Networking:

• DHCP service: Enabled
• IP Address: Automatically assign

Tempus Fugit is a Latin phrase that roughly translated as “time flies”.

This is an intermediate, real life box.

In Tempus Fugit 2, the idea is still, like in the first vm; to create something “out of the ordinary”.

The vm contains both user and root flags. If you don’t see them, you are not looking in the right place...

Need any hints? Feel free to contact me on Twitter: @4nqr34z

DHCP-Client.

Tested both on Virtualbox and vmware

Health warning: Have driven people to the brink of insanity

This is ubuntu 18.04 server which autostarts webgoat on http://<ip address>:8000/WebGoat/

Credentials: - user: webgoat - pass: webgoat

This machine is used to practice on different types of web attacks. Enjoy!

This is our tribute to the Indian Space Research Organisation (ISRO). We as Indians are proud of ISRO and its achievements. Solve this CTF challenge and feel the work of ISRO.

This machine contains 4 different flags to test your skills.

1. Aryabhata
2. Bhaskara
3. Mangalyaan
4. Chandrayaan 2

ENUMERATION IS THE KEY!!!!!

This festive season witness the Mahakaal himself in this Boot to Root Challenge. Gain the Root and Get indulged in the Bliss of The Rudra. Call yourself the True Bhole Bakth on completion of this challenge.

ENUMERATION IS THE KEY!!!!!

Hackable - Secret Hacker | Vulnerable Web Application Server

Web List

• DVWA
• BodgeIt Store
• bWAPP
• Commix
• CryptOMG
• Mutillidae 2
• sqli-labs
• Magical
• WebGoat
• WordPress 5.0
• Git
• Phpmyadmin

Git Tools

• fsociety
• the hydra
• xbruteforcer
• WAScan
• wpscan
• sqlmap

Blog Post : https://secrethackersite.blogspot.com/2019/10/hackable-secret-hacker-vulnerable-web.html

Plot

The Stheno Corporation are planning to cause a doomsday event using an unknown doomsday device within the next 12 hours, are you able to stop them dead in their tracks?

Your Goal

Stop the doomsday from occuring by disabling the doomsday devices created by The Stheno Corporation. Once you have succeeded you can retrieve your flag from http://192.168.56.105/flag.php

================ !!! IMPORTANT !!! ================

There are two vms that need to be powered on at the same time you cannot have one open while the other is offline

The vms must be on a host-only network and must be able to use the following ips (default settings for virtualbox):

• 192.168.56.105
• 192.168.56.107

Settings for virtualbox: - IPv4 Address: 192.168.56.1 - IPv4 Netmask: 255.255.255.0

DHCP:

• Server Addr: 192.168.56.100
• Server Mask: 255.255.255.0
• Lower Addr Bound: 192.168.56.101
• Upper Addr Bound: 192.168.56.254

This must be setup as there are strict firewall rules on the vms

Do not worry if you cannot reach 192.168.56.107 from the host pc this is intended

• Description: The Mattermost chatting system may or may not hold sensitive information. Can you find your way in?

• Virtual Machine: VMware

• Operation System: Linux Ubuntu 16.04

• Format: VMDK

• DHCP Service: Enabled

• IP Address: Automatically Assigned

Difficulty : Intermediate ~ Hard

There is one intended way to get low privilege user and two intended ways to get root shell.

Getting root using the easier way : Use anything you have

Getting root the harder way : Only use what's in the /root/

Virtual Machine

• OVA - Virtualbox
• Linux

Networking

• DHCP service: Enabled
• IP address: Automatically assign

Name: Oreo

OS: Android-x86 8.1 64-bit

Categories: basic enumeration, reverse engineering

Level: medium

Tested Virtualization Platforms: KVM, VMware

Root Flag Location: /data/root.txt

Vulnpire 1.0 is a tribute to all the Vampire myths & movies of the 20th and 21st Century.

Vulnpire 1.0 has 3 flags that are hidden within:

• Flag 1: easy - intermediate
• Flag 2: easy - intermediate
• Flag 3: intermediate - Hard (need to know some aspects of cryptography)

Created by LinaMika during the Covid-19 Lockdown of Year 2020.

"Then, I give you life eternal. Everlasting love. The power of the storm, and the beasts of the earth. Walk with me ..." (Dracula, Bram Stoker)