+---------------------------------------------------------+
|                                                         |
|                                  __..--''\              |
|                          __..--''         \             |
|                  __..--''          __..--''             |
|          __..--''          __..--''       |             |
|          \ o        __..--''____....----""              |
|           \__..--''\                                    |
|           |         \                                   |
|          +----------------------------------+           |
|          +----------------------------------+           |
|                                                         |
+- - - - - - - - - - - - - -|- - - - - - - - - - - - - - -+
|   Name: Stapler           |          IP: DHCP           |
|   Date: 2016-June-08      |        Goal: Get Root!      |
| Author: g0tmi1k           | Difficultly: ??? ;)         |
+- - - - - - - - - - - - - -|- - - - - - - - - - - - - - -+
|                                                         |
| + Average beginner/intermediate VM, only a few twists   |
|   + May find it easy/hard (depends on YOUR background)  |
|   + ...also which way you attack the box                |
|                                                         |
| + It SHOULD work on both VMware and Virtualbox          |
|   + REBOOT the VM if you CHANGE network modes           |
|   + Fusion users, you'll need to retry when importing   |
|                                                         |
| + There are multiple methods to-do this machine         |
|   + At least two (2) paths to get a limited shell       |
|   + At least three (3) ways to get a root access        |
|                                                         |
| + Made for BsidesLondon 2016                            |
|   + Slides: https://download.vulnhub.com/media/stapler/ |
|                                                         |
| + Thanks g0tmi1k, nullmode, rasta_mouse & superkojiman  |
|   + ...and shout-outs to the VulnHub-CTF Team =)        |
|                                                         |
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - -+
|                                                         |
|       --[[~~Enjoy. Have fun. Happy Hacking.~~]]--       |
|                                                         |
+---------------------------------------------------------+

Description

Wellcome to "PwnLab: init", my first Boot2Root virtual machine. Meant to be easy, I hope you enjoy it and maybe learn something. The purpose of this CTF is to get root and read de flag.

Can contact me at: [email protected] or on Twitter: @Chronicoder

• Difficulty: Low
• Flag: /root/flag.txt

File Information

• Filename: pwnlab_init.ova
• File size: 784 MB
• MD5: CE8AB26DE76E5883E67D6DE04C0F6E43
• SHA1: 575F19216A3FA3E377EFE69D5BF715913F294A3B

Virtual Machine

• Format: Virtual Machine (Virtualbox - OVA)
• Operating System: Debian

Networking

• DHCP service: Enabled
• IP address: Automatically assign

Welcome to Quaoar

This is a vulnerable machine i created for the Hackfest 2016 CTF http://hackfest.ca/

Difficulty : Very Easy

Tips:

Here are the tools you can research to help you to own this machine. nmap dirb / dirbuster / BurpSmartBuster nikto wpscan hydra Your Brain Coffee Google :)

Goals: This machine is intended to be doable by someone who is interested in learning computer security There are 3 flags on this machine 1. Get a shell 2. Get root access 3. There is a post exploitation flag on the box

Feedback: This is my first vulnerable machine, please give me feedback on how to improve ! @ViperBlackSkull on Twitter [email protected] Special Thanks to madmantm for testing

SHA-256 DA39EC5E9A82B33BA2C0CD2B1F5E8831E75759C51B3A136D3CB5D8126E2A4753

Dolev

One of the VMs used in the online CTF hosted back in September 2016 by Defcon Toronto, slightly modified to suit boot2root challenges.

Difficulty: Easy

Information: Overall 7 flags to collect, id 0 is the final step.

Details:

• File: Galahad.zip (ovf)
• Date: September 2016
• VM Type: Tested on VMware Workstation
• Notes: If the VM was able to obtain a DHCP you will likely see the IP in the VM login prompt.
• Networking: DHCP
• Checksum[SHA256]: c42839feadc8077380e167af9639cfcf9ebe3ffed083c98aee1e7d453022af5d

For any issues you can shoot an email to: dolev at dc416.com or DM me @dolevfarhi

Difficulty: Beginner/Intermediate

Bob is my first CTF VM that I have ever made so be easy on me if it's not perfect.

The Milburg Highschool Server has just been attacked, the IT staff have taken down their windows server and are now setting up a linux server running Debian. Could there a few weak points in the new unfinished server?

Your Goal is to get the flag in /

Hints: Remember to look for hidden info/files

[+] A CTF created by https://twitter.com/0katz

[+] Difficulty: Easy/Intermediate

[+] Tested in VirtualBox

[+] Note: 2 ways to get root!

The 2018 BSidesTLV CTF competition brought together over 310 team burning the midnight oil to crack our challenged in a bout that lasted for two weeks! But you can now enjoy the same pain and suffering, using this easy to use, condensed VM that now hosts all our challenges in an easy to digest format. This VM now includes all challenges from the CTF:

• IAmBrute
• Shared Directory
• Redirect me
• Crypto2
• c1337Shell
• IH8emacs
• Into the rabbit hole
• PimpMyRide
• Wtflol
• Can you bypass the SOP?
• T.A.R.D.I.S.
• I'm Pickle Rick!
• Creative Agency
• hideinpILainsight
• DockingStation
• NoSocket
• PySandbox-Insane
• ContactUs
• GamingStore

In order to access the challenges you need to:

• run ifconfig eth0 (in the VM)
• set challenges.bsidestlv.com in hosts file with the VM IP address

Credentials:

• CTFD User access (Use if you want to play):

  • user:user

• CTFD Admin access (Use if you want to modify):

  • bsidestlv:bsidestlv

• Boot2Docker SSH:

  • docker:tcuser

CTFd URL: http://challenges.bsidestlv.com

Replay is a sequel to Bob my first CTF. What sort of terrible redneck netsec engineering has Bob done now?

Your Goal is to get root and read /flag.txt

Note: There are three difficulties Hard: No Changelog.txt, no hex editor Mid: Read Changelog.txt, no hex editor Easy: Anything goes

Sputnik is an easy level boot2root machine designed to be a challenge for security enthusiasts to learn and practice compromising machines and penetration testing.

The vulnerable machine was made as a boot2root CTF challenge for an InfoSec community wherein CTF challenges were made by hackstreetboys (a CTF team from Philippines).

 __      __    _         _    _       _ 
 \ \    / /   | |       | |  | |     (_)
  \ \  / /   _| |_ __   | |  | |_ __  _ 
   \ \/ / | | | | '_ \  | |  | | '_ \| |
    \  /| |_| | | | | | | |__| | | | | |
     \/  \__,_|_|_| |_|  \____/|_| |_|_|

Welcome to "Vuln Uni"!

This boot2root machine is realistic without any CTF elements and pretty straight forward.

Goal: Hack your University and get root access to the server.

To successfully complete the challenge you need to get user and root flags.

Difficulty: Easy / Beginner Level

https://emaragkos.gr/vulnhub-writeups/vulnhub-boot2root-machine-vulnuni/

Need hints? Twitter @emaragkos

DHCP is enabled

Your feedback is really valuable for me!

Was there something that you didn’t like about this VM?

Please let me know so that I can make more interesting challenges in the future.

Good luck and have fun :)

This VM is given as challenge 1 in InfoSecWarrior CTF 2020. Official website : https://www.infosecwarrior.com/

Box Designed by: MAALP & CyberKnight00

Difficulty: Easy

Feel free to contact MAALP for any Hints

Twitter handle of MAALP is @AFREET1225

An easy to intermediate, TIGER KING themed boot2root.

Why is this "Tiger King" themed!? Well I decided to put my first CTF together, and needed some ideas for the blog.

Lo and behold, Joe Exotic appeared on TV and thus, this CTF was made.

Can you help Joe escape from prison?

There are no off the shelf exploits here, and bruteforcing will get you nowhere. You will need to perform manual investigation and enumeration.

Multiple ways to achieve root, ranging from beginner to medium difficulty.