A bittersweet shellfony

Date

Validations

251 Compromissions 12%

Note  Notation

9 votes

Description

Attention : this CTF-ATD is linked to the challenge "A bittersweet shellfony"

My audio website was hacked. I know i have to fix an xss, but there is no admin interface and i haven’t clicked in any malicious link !

Please reproduce the way hackers got inside and tell me how they have done it !

Temps de compromission

4 heures

Système d'exploitation

 linux

démarrer cet environnement virtuel

 178 Environnements Virtuels

Résultats Nom Validations Difficulté  Difficulté Autrice Note  Notation
pas_valide Metasploitable 2 39% 8843
pas_valide Basic pentesting 1 31% 4980
pas_valide LAMP security CTF5 25% 3951
pas_valide Docker - I am groot 50% 3513 Ech0
pas_valide LAMP security CTF4 35% 2772
pas_valide SSH Agent Hijacking 25% 2507 mayfly
pas_valide SSRF Box 18% 1905 sambecks
pas_valide Metasploitable 12% 1772
pas_valide Mr. Robot 1 21% 1671
pas_valide End Droid 34% 1632
pas_valide Imagick 22% 1084 sambecks
pas_valide Docker - Sys-Admin’s Docker 38% 1084 Ech0
pas_valide SamBox v2 13% 1016 sambecks
pas_valide Kioptrix level 2 24% 976
pas_valide LAMP security CTF7 38% 900
pas_valide VulnVoIP 17% 881
pas_valide Docker - Talk through me 42% 754 Ech0
pas_valide SamBox v1 7% 749 sambecks
pas_valide Windows - Group Policy Preferences Passwords 26% 700
pas_valide Django unchained 23% 679 TiWim
pas_valide Well-Known 10% 651 sm0k
pas_valide LAMP security CTF6 18% 610
pas_valide Windows - KerbeRoast 17% 602
pas_valide Shared Objects Hijacking 12% 596 das
pas_valide Kioptrix level 3 32% 578
pas_valide BreakingRootme2020 15% 556 Laluka
pas_valide Windows - ASRepRoast 33% 540
pas_valide Websocket - 0 protection 7% 526 Worty
pas_valide Awky 8% 515 sbrk
pas_valide Windows XP pro 01 5% 509 g0uZ
pas_valide Rootkit Cold Case 15% 498 franb
pas_valide Kioptrix level 4 34% 465
pas_valide Bluebox - Microsoft Pentest 4% 431
pas_valide pWnOS 31% 405
pas_valide Hackademic RTB1 19% 365
pas_valide DC-1 14% 349
pas_valide SamBox v3 5% 348 sambecks
pas_valide Bluebox 2 - Pentest 3% 316 sambecks
pas_valide Exploit KB Vulnerable Web App 12% 308
pas_valide SAP Pentest 7% 300 iggy
pas_valide Holynix v1 24% 294
pas_valide LAMP security CTF8 14% 293
pas_valide Windows - sAMAccountName spoofing 23% 280
pas_valide A bittersweet shellfony 12% 251 mayfly
pas_valide /dev/random : Pipe 4% 240
pas_valide Hopital Bozobe 8% 239 sambecks
pas_valide LordoftheRoot 25% 234
pas_valide Acid : Server 11% 220
pas_valide FristiLeaks 1.3 28% 217
pas_valide SkyTower 24% 217