This time we are going to solve a fun VM i.e. Breach 1.0. Let’s find out what we already know about it:

• Network Scanning (Netdiscover, Nmap)
  
• Inspecting web services for (Flag 1, 2, 3 & 4)
  
• Get flag 1st from inside SkyDogCon_CTF.jpg (ExifTool)
  
• Get flag 2nd using robot.txt
  
• Get flag 3rd from whistler.zip
  
• Generating Dictionary for web directory (Cewl)
  
• Directory brute force (Dirb)
  
• Get flag 4th from play inside PlayTronics
  
• Get the .pcap file and grab an audio file (Wireshark)
  
• SSH Brute force Attack (Hydra)
  
• Spawn TTY shell of the machine and Get flag 5th (SSH login)
  
• Writable File privilege escalation
  
• Get the Root Access and Capture the flag 6th
  

• PlayTronics
  
• Sectec
  
• Astronomy
  

• Network Scanning (Nmap)
  
• Recon (Nikto)
  
• LFI due to allow_url_inclued
  
• Install Tamper data (Firefox plugin)
  
• Generate PHP Backdoor (Msfvenom)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Open UNIX wildcard text file
  
• Privilege Escalation (cron job)
  
• Import python one-liner for proper TTY shell
  
• Take root access and capture the flag
  

• Network Scanning (Nmap, netdiscover)
  
• Joomla based CMS Scanning CMS (Joomscan)
  
• Exploiting target (exploit 6234)
  
• Login into the admin console
  
• Generate PHP Backdoor (Msfvenom)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Import python one-liner for proper TTY shell
  
• Find SUID Binaries for Privilege Escalation
  
• Abusing shadow & password file
  
• Get Root access and capture the flag.
  

Simple CTF is a boot2root that focuses on the basics of web-based hacking. Once you load the VM, treat it as a machine you can see on the network, i.e. you don’t have physical access to this machine. Therefore, tricks like editing the VM’s BIOS or Grub configuration are not allowed. Only remote attacks are permitted. /root/flag.txt is your ultimate goal. Therefore, in this article, I will walk you through the whole method of completing this challenge.

First Download Simple VM from

[To see content please register here]

• Network Scanning (Netdiscover, Nmap)
  
• Enumerate File upload vulnerability (searchsploit)
  
• Generate PHP Backdoor (Msfvenom)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Import python one-liner for proper TTY shell
  
• Kernel Privilege Escalation
  
• Get Root access and capture the flag.
  

• Network Scanning (Netdiscover, Nmap)
  
• Directory brute-force (dirb)
  
• Find HTTP Options: PUT (curl)
  
• Generate PHP Backdoor (Msfvenom)
  
• Install Poster (Firefox plug-in)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Privilege Escalation (cron job)
  
• Import python one-liner for proper TTY shell
  
• Get Root access and capture the flag.
  

• Virtual Box
  
• Santoku OS which come with preinstalled SDKs.
  
• GenyMotion for creating Android Virtual Device ( AVD)
  
• A vulnerable android app “InsecureBankv2”.
  

• Network Scanning (Nmap, netdiscover)
  
• webserver enumeration (view source)
  
• Directory brute-force (dirb)
  
• Generate own Dictionary (crunch)
  
• Login into the admin console
  
• Generate PHP Backdoor (Msfvenom)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Kernel privilege escalation (Metasploit)
  
• Gain root access
  
• Penetrate for flag.zip
  
• Access Ram and finished the task
  

• the password is in lowercase
  
• the password has 3 letters and four digits
  
• and it is related to c=64 sound chip
  

In this article, we will try to attack and gain root access to the Stapler: 1 challenge from VulnHub. The goal is to reconnaissance, enumeration, and exploits this vulnerable machine to get root access and to read the contents of flag.txt. We have been told that are various methods to do so but we have tried and found the simplest way.
Download the stapler VM from

[To see content please register here]

• Network Scanning (Nmap, netdiscover)
  
• Enumeration (robot.txt)
  
• WordPress scanning & password cracking (wpscan)
  
• Login into WordPress
  
• Generate PHP Backdoor (Msfvenom)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Import python one-liner for proper TTY shell
  
• Kernel privilege escalation
  
• Get Root access and capture the flag.
  

• Network Scanning (Netdiscover, Nmap)
  
• Identifies Drupal CMS
  
• Exploiting Drupal CMs (Metasploit)
  
• Privilege Escalation with Kernel Exploit
  
• Uploading and Downloading dave.tc from /www/html
  
• Generate a Dictionary with the help of rockyou.txt
  
• Brute Force attack on Truecrypt Volume (Truecrack)
  
• Decrypting File (Veracrypt)
  
• Capture the Flag
  

• Network Scanning (Nmap, netdiscover)
  
• Recon (Nikto)
  
• Use robot.txt
  
• Grab 1st key
  
• Download fsocity.dic file and use a dictionary
  
• WordPress password cracking (wpscan)
  
• Login into WordPress
  
• Generate PHP Backdoor (Msfvenom)
  
• Upload and execute a backdoor
  
• Reverse connection (Metasploit)
  
• Get MD5 hash and decrypt it
  
• Import python one-liner for proper TTY shell
  
• Find / perm u=s for Privilege Escalation
  
• Get Root access and capture the flag.
  

In this article, we will walkthrough a root2boot penetration testing challenge i.e PwnLab. PwbLab is a vulnerable framework, based on the concept of CTF (capture the flag), with a bit of security which is a little complicated to bypass. But it’s not impossible. So, let us learn how we can get access.

Download From

[To see content please register here]

• Network Scanning (Nmap, netdiscover)
  
• Information Gathering (Nikto)
  
• Abusing config.php file (curl & PHP filter convert)
  
• Obtain Mysql Database credential
  
• Extract user credential from Mysql Database
  
• Login to web application
  
• Upload webshell (PHP reverse shell)
  
• Executing Uploaded PHP backdoor (Burp suit)
  
• Netcat session
  
• Import python one-liner for proper TTY shell
  
• Find SUID Binaries
  
• Privilege Escalation by Manipulating $PATH
  
• Get Root access and capture the flag.
  

exploit

exploit

Ordinarily small things have no use but whenever it comes up to their greater relevance then at a certain point of time it has a universalized impact and can create a complex situation. And this article is about some simple payloads that can help us to muddle with our victim. Hence, leaving a mark behind.

• Add User
  
• Message Box
  
• Format all drives
  
• Speak
  

• Antipwny
  
• Antimeter
  

In Cyber Forensic, to investigate a hard drive or disks we always make a forensic image. In this article, we will learn to create various ways forensic images.
Table of Content :

• Introduction
  
• Why mounting an image is necessary
  
• AccessData FTK Imager
  
• OSFMount
  
• Mount Image PRO
  

• Hydra
  
• X-Hydra
  
• Medusa
  
• Ncrack
  
• Metasploit
  

Hello friends! Today we are going to take another CTF challenge known as VulnOS 1 presented by the

[To see content please register here]

• Network Scanning (Nmap, netdiscover)
  
• Surfing HTTP service port (80)
  
• Exploiting the distccd vulnerability to get files
  
• Login into target machine via SSH
  
• Exploiting target with SUDO rights
  
• Get the Root access and the flag
  

• Network Scanning (Nmap)
  
• Login form SQL injection
  
• Upload php web shell
  
• Spawn TTY shell (Netcat)
  
• Mysql Login
  
• Steal MD5 password
  
• Crack MD5 hashes (John the ripper)
  
• SSH login
  
• Sudo privilege escalation
  
• Get root access
  

Hello readers and welcome to another CTF challenge. It is developed by PaulWebSec. The aim of this lab is to get the root on the VM and read the congratulatory message. The virtual machine can be downloaded

[To see content please register here]

• IP discovery and port scanning
  
• Running the web app
  
• Running a CSRF attack on the administrator
  
• Tricking admin to visit a fake page by sending him a message
  
• Waiting a few minutes to let admin visit that page
  
• Getting credentials and logging in SSH using these
  
• Running overlayfs on the system
  
• Getting root access!
  

• Network Scanning (Nmap, Netdiscover)
  
• Examining HTTP web page
  
• FTP Login for log.php file
  
• Use PHP web shell one-liner
  
• Insert netcat reverse_shell payload
  
• Spawn TTY shell
  
• Editing passwd file for Privilege escalation
  
• Get Root access
  

Username: logs
Password: zg]E-b0]+858G
1
2
Username: logs
Password: zg]E-b0]+858G

Today we are going to solve another CTF challenge “Troll 1” of the vulnhub labs. The level of this challenge is not so tough and its difficulty level is described as beginner/intermediate. You can download it from here

[To see content please register here]

• Network Scanning (Nmap, netdiscover)
  
• Anonymous FTP login
  
• Abusing web browser
  
• Brute-force attack (hydra)
  
• SSH login
  
• Privilege Escalation
  
• Get root access
  
• Capture the flag
  

OOOooooh Great!! Here is our possible ssh login credential overflowass.txt

• Network Scanning (Nmap, netdiscover)
  
• SQL-Injection on Login Form
  
• Decrypting Hint to Get ports for port knocking
  
• Port Knocking using NMAP
  
• SQL-Injection using Sqlmap on URL
  
• Upload and execute a Reverse shell
  
• Reverse connection (netcat)
  
• Exploiting target (exploit 15285)
  
• Get Root access and capture the flag.
  

• Network Scanning (Nmap, netdiscover)
  
• WordPress (CMS) based SQLMAP Scanning
  
• Extract databases and WordPress user credentials
  
• Login into the WordPress admin console with specific user
  
• Upload and execute a Reverse shell
  
• Reverse connection (Metasploit)
  
• Exploiting target (exploit 15285)
  
• Get Root access and capture the flag.