Flick 2



8 Compromissions 13%

Note  Notation

0 Vote


Your challenge, should you choose to accept, is to gain root access on the server! The employees over at Flick Inc. have been hard at work prepping the release of their server checker app. Amidst all the chaos, they finally have a version ready for testing before it goes live.

You have been given a pre-production build of the Android .apk that will soon appear on the Play Store, together with a VM sample of the server that they want to deploy to their cloud hosting provider.

The .apk may be installed on a phone (though I wont be offended if you don’t trust me ;]) or run in an android emulator such as the Android Studio (https://developer.android.com/sdk/index.html).

Compromission time

4 hours

Operating system


start this virtual environnement

CTF Results CTF Results for Flick 2

Pseudo Virtual Environnement Attackers count Time start Environnement compromised in
- Flick 2 0 23 January 2019 at 16:50 -
- Flick 2 1 12 October 2018 at 13:26 -
dalifit Flick 2 1 2 October 2018 at 17:29 1h52
- Flick 2 0 17 July 2018 at 18:03 -
- Flick 2 0 27 May 2018 at 13:18 -