Difficulty: Medium

This is a vulnerable linux box for testing your web application exploitation skills and you will learn basics of binary exploitation.

Recently, Good Tech Inc. has decided to change their application development process. However, their applications look broken and too basic. Is this an application full of snakeoil, or are they insecure too? This goes beyond PEN-200, and some web application development expertise could be helpful.

If you MUST have hints for this machine: SNAKEOIL is (#1): a hint by itself, (#2): full of disallowed methods, (#3): a single file full of problems.

VPLE (Vulnerable Pentesting Lab Environment)

• username:- administrator
• password:- password

VPLE is an intentionally vulnerable Linux virtual machine. This VM can be used to conduct security training, test security tools, and practice common penetration testing Labs. In VPLE bunch of labs Available. (only run in VMWare Pls Don’t run in VirtualBox)

List Of All Labs:-

• Web-dvwa (eg.123.123.123.123:1335/)
• Mutillidae (eg.123.123.123.123:1336/)
• Webgoat (eg.123.123.123.123:1337/WebGoat/)
• Bwapp (eg.123.123.123.123:8080/install.php & 123.123.123.123:8080/install.php )
• Juice-shop (eg.123.123.123.123:3000/)
• Security-ninjas (eg.123.123.123.123:8899/)
• Wordpress (eg.123.123.123.123:8800/)

Box created by vishal Waghmare This box should be easy to medium . This machine was created for the InfoSec Prep

Discord Server ( https://discord.gg/kDyAKtJs ) Website (https://hacksudo.com)

This box created for improvement of Linux privileged escalation, I hope so you guys enjoy. The box was created with Virtualbox ,but it should work with VMWare Player and VMWare workstation Upon booting up use netdiscover tool to find IP address you can check ip on grab page . This is the target address based on whatever settings you have. You should verify the address just incase.

Find the root.txt flag submit it to the flagsubmit channel on Discord and get chance to get hacksudo machine hacking course free .

Your boss told you to do a quick pentesting engagement on their new ERP/CRM Software that was recently setup and modded by junior developers . Can you find what mistakes did the developers made ?

This machine Is Based Of A Realistic Engagement When it comes to the web part

Difficulty : hard

Box created by hacksudo team members vishal Waghmare , Soham Deshmukh This box should be easy to medium . This machine was created for the InfoSec Prep Discord Server (https://discord.gg/tsEQqDJh) and Website (https://hacksudo.com)

This box created for improvement of Linux privileged escalation and CMS skill , I hope so you guys enjoy. The box was created with Virtualbox ,but it should work with VMWare Player and VMWare workstation Upon booting up use netdiscover tool to find IP address you can check ip on grab page . This is the target address based on whatever settings you have. You should verify the address just incase.

Find the root.txt flag submit it to the flagsubmit channel on Discord and get chance to get hacksudo machine hacking course free .

This is a vulnerable linux box focused on web application testing along with showing the importance of enumeration. There are three users you needs to compromise to read the root flag.

Difficulty: Easy-Medium

This vm will give you some real concept that is needfull for a global level certifications. And you are going to enjoy this VM because of there is a good combination of network and web pentesting. For any help contact here https://www.hackerctf.com/contact-us or drop an email to [email protected]

Corpvision - Vision to your Future

Corpvision is a Company that hired Steven Smith, A Web Developer to create their website and now they hired you to test the security of their website. So Get, Set, and Go :)

Difficulty: Beginner to Intermediate

Tested On: Works well on VirtualBox, haven't tested on any other platforms.

Facing any issue or any suggestions, hit me up on Twitter at twitter/@thehackersbrain.

James M Brunner, A Web Developer has recently created a blog website. He hired you to test the Security of his Blog Website. Hack Your Way In Mr. Robot Style :)

Add blogger.thm to /etc/hosts file

Difficulty: Beginner, Easy

a easy/medium web exploiting machine, with internal pivoting and CVE / RCE