Root Me : plateforme d'apprentissage dédiée au Hacking et à la Sécurité de l'Information

Android - Shady VPN

apges01 — 2025-09-08T10:01:40Z

Challenge sponsored by Airbus at the CTF "Security Hacking Contest 2023".

Mr Y uses the NxShield VPN application to protect his identity when surfing the Internet. Your task in the following steps will be to analyze this application to understand how it works.

In parallel, our network teams were able to intercept a communication about 2 days ago between this application and NxShield's VPN servers. You need to find a way to access the data exchanged during this capture, which will be very important in identifying Mr. Y's identity.

Before starting your analysis, please note that we have shut down the servers used by NxShield VPN. Unfortunately, some of the application's features are no longer available, but we hope this will have no impact on your analysis.

Time is of the essence...

sha256sum (ch33.zip) : 5782eb96b88699962c063249cf8600d2515815cbca4315f662e19af70ee355e0

Information :
This challenge includes 4 flags to be found when analyzing the NxShield application.

– Application access code
– Activation code for connection form
– Mr Y's password
– The flag present on an image in the network capture

The flag format is as follows : sha256sum(flag1:flag2:flag3:flag4)

- Realist

VPN Provider

Nishacid — 2025-09-08T10:01:14Z

Challenge sponsored by Airbus at the CTF "Security Hacking Contest 2023".

We are currently investigating the identity of Mrs Alice X, who is planning to carry out an attack in the next few weeks. Recently, we were able to intercept a photo taken with her personal cell phone. Can you give us an in-depth analysis of this photo ? It's the only information we have at the moment...

Furthermore, according to our technical teams, Mrs Alice X seems to use tools such as a VPN to guarantee her security on the Internet.

The challenge flag is located in /flag.txt

- Realist

ComCyber - Challenge

redoste — 2024-11-19T09:03:03Z

This challenge is brought to you by Cyber Defense Command (COMCYBER)

- Realist

Mersenne with 2

ycam — 2024-04-05T12:00:24Z

The well-known "Mersenne Social Network" was hacked last week ! The entire user database and passwords have been leaked ! The technical teams are still investigating. Until things get back to normal, registration and authentication are disabled and all users are forced to renew their passwords. Can you take advantage of this situation to steal the administrator's account ?

- Realist

Extractor

Elweth — 2024-04-05T12:00:17Z

Compromise this website and gain root access to the server to validate the challenge.

Warning : This challenge restarts every two hours.

- Realist

C for C-cure

nikost — 2024-04-05T12:00:03Z

Your best friend has just received his first mandatory training in web application security.
Astonished by the multitude of common vulnerabilities and their impact, he decided to re-code his entire blog himself from scratch and add protection mechanisms.
He proudly announced to you that his server was now "protected against all known vulnerabilities".

Prove him wrong by getting root access on his machine.

- Realist

End Droid

Mhd_Root — 2023-07-13T14:04:48Z

A small group of students wanted to change old habits and choose an old Android phone as a server to host their project management application.

Will you be able to recover the secret communications it contains ?

Démarrer le CTF all the day

- Realist

Bohemian RhapC2

sm0k — 2023-03-23T16:31:33Z

Airbus sponsored this challenge for the CTF "Root Me If You Can 2022".

A team of hackers came to promote their new RaaS platform on your favorite forum ! The platform seems to be still in development and you have very little information.
Try to infiltrate the main administrator's machine in order to cut off his power.
5 steps will be necessary to achieve your goal.

The password is the sha256 of the 5 intermediate flags to find :
sha256sum(flag1:flag2:flag3:flag4:flag5)

Démarrer le CTF all the day

- Realist

Windows - krbtgt history

Podalirius — 2023-03-22T17:59:57Z

You intervene for an Active Directory infrastructure audit in grey box for a customer. To perform the tests, the customer gives you a standard user account in the ROOTME.local domain :

 Domain: ROOTME.local Domain controller: DC-KRBTGT.ROOTME.local Username: pentest Password: Pent3st123!

The validation flag is located on the Administrator's desktop

Sources to download : https://static.root-me.org/realiste/ch267/ch267.zip

Démarrer le CTF all the day

- Realist

Windows - sAMAccountName spoofing

Podalirius — 2023-03-22T17:59:53Z

You intervene for an Active Directory infrastructure audit in grey box for a customer. To perform the tests, the customer gives you a standard user account in the ROOTME.local domain :

 Domain: ROOTME.local Domain controller: DC-SAMAC.ROOTME.local Username: pentest Password: Pent3st123!

The validation flag is located on the Administrator's desktop

Démarrer le CTF all the day

- Realist