Flick 2

Date

Validations

10 Compromissions 10%

Note  Notation

1
2
3
4
5
0 Vote

Description

Your challenge, should you choose to accept, is to gain root access on the server! The employees over at Flick Inc. have been hard at work prepping the release of their server checker app. Amidst all the chaos, they finally have a version ready for testing before it goes live.

You have been given a pre-production build of the Android .apk that will soon appear on the Play Store, together with a VM sample of the server that they want to deploy to their cloud hosting provider.

The .apk may be installed on a phone (though I wont be offended if you don’t trust me ;]) or run in an android emulator such as the Android Studio (https://developer.android.com/sdk/index.html).

Compromission time

4 hours

Operating system

 linux

start this virtual environnement

CTF Results CTF Results for Flick 2

Pseudo Virtual Environnement Attackers count Time start Environnement compromised in
- Flick 2 1 1 May 2018 at 23:28 -
- Flick 2 0 12 April 2018 at 17:15 -
- Flick 2 2 4 April 2018 at 14:24 -
- Flick 2 1 3 April 2018 at 15:35 -
tenflo Flick 2 4 15 March 2018 at 17:24 3h40

 173 Virtual Environnements

Results Name Validations Difficulty  Difficulty Author Note  Notation
pas_valide Challenge SecuriTech 1% 13
pas_valide Windows XP pro 01 5% 490 g0uZ
pas_valide Exploit KB Vulnerable Web App 12% 305
pas_valide Holynix v1 24% 292
pas_valide Kioptrix level 2 25% 962
pas_valide Kioptrix level 3 33% 569
pas_valide Kioptrix level 4 35% 459
pas_valide LAMP security CTF4 35% 2686
pas_valide LAMP security CTF5 26% 3825
pas_valide LAMP security CTF6 18% 599
pas_valide Metasploitable 12% 1697
pas_valide Metasploitable 2 40% 8336
pas_valide Moth 21% 107
pas_valide pWnOS 32% 394
pas_valide Ubuntu 8.04 weak 5% 205 g0uZ
pas_valide Ultimate LAMP 18% 147
pas_valide VulnVoIP 17% 826
pas_valide VulnVPN 12% 59
pas_valide LAMP security CTF8 14% 288
pas_valide LAMP security CTF7 39% 879
pas_valide Hackademic RTB1 19% 362
pas_valide No Exploiting Me 14% 54
pas_valide SamBox v1 7% 714 sambecks
pas_valide SamBox v2 13% 951 sambecks
pas_valide RA1NXing Bots 8% 16
pas_valide Murdering Dexter 16% 49
pas_valide LoBOTomy 4% 9
pas_valide Vulnix 2% 12
pas_valide Xerxes 3% 18
pas_valide Infernal Hades 6% 15
pas_valide SkyTower 24% 212
pas_valide Bluebox - Microsoft Pentest 4% 408
pas_valide Acid: Reloaded 18% 174
pas_valide Acid: Server 12% 212
pas_valide CsharpVulnJson 6% 14 notfound404
pas_valide CsharpVulnSoap 11% 8
pas_valide /dev/random : Pipe 5% 233
pas_valide /dev/random : Relativity 7% 96
pas_valide /dev/random : Sleepy 4% 44
pas_valide brainpan1 4% 82
pas_valide LordoftheRoot 25% 227
pas_valide Flick 1 9% 64
pas_valide Flick 2 10% 10
pas_valide FristiLeaks 1.3 29% 214
pas_valide The Purge 5% 14
pas_valide SickOs: 1.1 13% 90
pas_valide Xerxes: 2.0.1 13% 20
pas_valide brainpan2 9% 22
pas_valide brainpan3 6% 6
pas_valide SAP Pentest 7% 284 iggy