SSRF Box

Date

Validations

1900 Compromissions 18%

Note  Notation

1
2
3
4
5
58 Votes

Description

Attention : this CTF-ATD is linked to the challenge "Server Side Request Forgery"

Your goal is simple: compromise the virtual environment "SSRF Box".

The validation password of challenge (Realist) is in the /root directory.

Compromission time

4 hours

Operating system

 linux

start this virtual environnement

CTF Results CTF Results for SSRF Box

Pseudo Virtual Environnement Attackers count Time start Environnement compromised in
- SSRF Box 2 21 February 2019 at 19:36 -
- SSRF Box 0 21 February 2019 at 14:29 -
- SSRF Box 0 21 February 2019 at 10:59 -
- SSRF Box 1 21 February 2019 at 10:48 -
- SSRF Box 1 21 February 2019 at 10:37 -

 178 Virtual Environnements

Results Name Validations Difficulty ↓↑  Difficulty Author Note  Notation
pas_valide Challenge SecuriTech 1% 13
pas_valide SP - Eric 31% 42
pas_valide Homeless 9% 14
pas_valide Kuya 21% 25
pas_valide Lampiao 7% 22
pas_valide Lazysysadmin 16% 58
pas_valide Node 19% 34
pas_valide Basilic 4% 19
pas_valide NullByte 26% 49
pas_valide SP - Christophe 3% 3
pas_valide The Ether : EvilScience 6% 10
pas_valide Gittysburg 3% 2
pas_valide Typhoon-v1 30% 32
pas_valide Replay 1 16% 8
pas_valide Bash considered harmful 8% 138 sbrk
pas_valide System Disaster 7% 141 sbrk
pas_valide Shared Objects Hijacking 12% 594 das
pas_valide k8s 10% 168 sambecks
pas_valide DC-4 17% 163
pas_valide DC-6 30% 116
pas_valide HackDay-Albania 12% 24
pas_valide Gemini-Pentest-v2 12% 9
pas_valide DC-9 32% 111
pas_valide Billu-b0x 8% 36
pas_valide Kevgir-VM 15% 31
pas_valide lin.security_v1.0 42% 99
pas_valide Moonraker 10% 8
pas_valide OwlNest v1.0.2 9% 4
pas_valide Raven 2 12% 10
pas_valide Sambox v4 3% 109 sambecks
pas_valide Django unchained 23% 672 TiWim
pas_valide Billu-b0x2 9% 128
pas_valide BlackMarket 11% 69
pas_valide Gemini-Pentest-v1 7% 29
pas_valide Born2rootv2 33% 94
pas_valide Bee-box v1 6% 41
pas_valide Command Injection OS 18% 59
pas_valide DC-1 14% 349
pas_valide digitalworld.local - BRAVERY 11% 17
pas_valide digitalworld.local - DEVELOPMENT 8% 12
pas_valide DonkeyDocker v1 23% 18
pas_valide g0rmint 8% 11
pas_valide DC-7 27% 50
pas_valide Well-Known 10% 648 sm0k
pas_valide IMF 9% 9
pas_valide ARP Spoofing EcouteActive 0% 0 voydstack
pas_valide Windows - sAMAccountName spoofing 23% 280
pas_valide OpenClassrooms_SkillProgram_AD1 1% 104 Pixis, EtienneC
pas_valide CTFair 0% 0
pas_valide Windows - KerbeRoast 17% 596