Root Me : plateforme d'apprentissage dédiée au Hacking et à la Sécurité de l'Information

Analog video

kevin.mille — 2025-06-23T18:18:48Z

Find the flag in this analog video signal.

Recording file format :

binary file
real signal, floating point, quantized on 32 bits
sampling rate = 26 Mech/s

The signal contains only video (no audio).

- Network

ARP Spoofing - The man in the middle

o71 , voydstack — 2024-05-28T10:00:53Z

Your friend wasn't at all pleased that you'd managed to take control of his network and retrieve his confidential information. So this time he made the task much harder by making the database password much more complex.

You still have access to your friend's LAN with an attacking machine that you control.

The flag is in the database located on one of the network hosts.

Start the CTF-ATD "ARP Spoofing HommeDuMilieu"
Log in with SSH on the machine port 22222 (root:root)
There is no validation of the virtual environment with a /passwd

Do not hesitate to change the password of the root user in order to be alone on the machine to perform your manipulations.

Démarrer le CTF all the day

- Network

WPA3 - SAE

cb34 — 2024-05-28T10:00:48Z

Bob is proud to have configured his Wifi network in WPA3-SAE, and he challenges Alice to decode the frames in the Wifi capture he gives her. Without knowing the SAE password, Bob thinks Alice will never succeed. In fact, even knowing it, it still wouldn't be possible.

However, Clark, a friend of Alice's, managed to leak an essential value for decryption by slightly modifying the sources of wpa_supplicant without Bob's knowledge :

mask=0x37afd012e0ad30e00e21ffaad188f5966a6c21ec88b49259d5567a3d333d8b29

Can you help Alice surprise Bob and find the flag with the value given by Clark ?

NB : Bob is so confident in SAE that he's forgotten the correct password security guidelines, but we do know that he used at least 12 characters.

Flag format : SAExxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

sha256sum : 3b0e30b31fd6349ef490e1d93a5c3441c0272ded1ffb2a40a4a4858136760d97

- Network

WPA2 - Enterprise

cb34 — 2024-05-28T10:00:45Z

Bob has set up a WPA2-Enterprise network and is convinced that Alice won't be able to decrypt his Wi-Fi frames. He hasn't realised that Alice's friend Clark has managed to infiltrate the local network and capture the RADIUS frames when the Wi-Fi client connects.

Knowing that Bob isn't very imaginative about his secrets, help Alice find the flag sent by the Wi-Fi client.

Flag format : WPA2-ENTRPxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

sha256sum : 7158e4e6afbad5a635c4390f884196d7ccc83aca327e35813a8fcb0193faa9f3

- Network

Data extraction

Tidusrose — 2024-05-28T10:00:41Z

Your network teacher provides you with this capture and asks you to try and find the files he has sent through your test lab.

The flag is the concatenation of the three flags present in the files.

Good luck ! :)

sha256sum : 66adb6a6a6c96c486e9f1856bf5039ab3b7a713b2a94e834ed281e7444f8aea7

- Network

Kerberos - Authentication

nuts. — 2024-05-28T10:00:37Z

You have been asked by Cat Corporation's SOC team to retrieve a user's password linked to a suspicious Kerberos connection.

Flag format : RM{userPrincipalName:password}

* The userPrincipalName must be written in lowercase.

sha256sum : 0770efe5374637534fe55fdf51a3b7a1d5c58a1d6027d7143ce0a491ffd66405

- Network

NTLM - Authentication

nuts. — 2024-05-28T10:00:34Z

You have been commissioned by the Cat Corporation SOC team to recover the password of a user linked to a suspicious NTLM over SMB connection.

Flag format : RM{userPrincipalName:password}

sha256sum : bc79ea3669e291151284c5e46474a1e8bd2689f1f526e844543e971164f95a70

- Network

ARP Spoofing - Active listening

voydstack — 2023-06-05T10:22:20Z

Your friend assures you that you cannot retrieve confidential information that passes through his network. He is so confident that he gives you access to his LAN via a host that you control.

The flag is the concatenation of the response to a network query, along with the database password, in the following form : reponse:db_password.

Start the CTF-ATD "ARP Spoofing EcouteActive"
Log in with SSH on the machine port 22222 (root:root)
There is no validation of the virtual environment with a /passwd

Do not hesitate to change the password of the root user in order to be alone on the machine to perform your manipulations.

Démarrer le CTF all the day

- Network

OSPF - Authentication

Tidusrose — 2023-06-05T10:22:03Z

You are hired to test the security of a company's network.
You quickly manage to capture some OSPF packets.

Find the OSPF authentication key to continue your investigation !

Good luck !

sha256sum : 9CF709C4984B7EB6426A6B4B9B3B35604055B6040CCD46B30DF785D7D21F28AB

- Network

RF - L Band

Matioupi — 2022-03-18T11:12:45Z

Things are not going well at the agency, the investigation into mysterious L-band jamming is going nowhere, and on top of that you suspect one of the agents on the case of being a double agent and passing information to the enemy.
You recently sent him into the field to make recordings with a HackRF to try to find out more about these signals.
Will you be able to confuse him, by finding from an 85s extract of the recorded data the name of the hideout where the information exchanges are taking place and where you suspect him to have gone during the mission ?

The HackRF was set with a sampling rate of 2.6 MSps and a frequency of 1576 MHz which is close to that of the interfering signals.

The flag is the name of the locality, in lower case, as seen on the IGN SCAN25 map.

The sha256 digest of the decompressed IQ file is : f267f0a34258bfdd240921a504c028f883214772a037d05b009349738824b9cd

- Network