SSRF Box

22 June 2018

1900 Compromissions 18%

58 Votes

Attention : this CTF-ATD is linked to the challenge "Server Side Request Forgery"

Your goal is simple: compromise the virtual environment "SSRF Box".

The validation password of challenge (Realist) is in the /root directory.

4 hours

linux

CTF Results for SSRF Box

Pseudo	Virtual Environnement	Attackers count	Time start	Environnement compromised in
-	SSRF Box	1	20 February 2019 at 19:14	-
-	SSRF Box	1	20 February 2019 at 19:04	-
-	SSRF Box	2	20 February 2019 at 15:31	-
b0z	SSRF Box	3	20 February 2019 at 13:40	1h46
-	SSRF Box	4	20 February 2019 at 08:28	-

Results	Name	Validations	Difficulty ↓↑	Author	Note
	Challenge SecuriTech	1% 13
	SP - Eric	31% 42
	Homeless	9% 14
	Kuya	21% 25
	Lampiao	7% 22
	Lazysysadmin	16% 58
	Node	19% 34
	Basilic	4% 19
	NullByte	26% 49
	SP - Christophe	3% 3
	The Ether : EvilScience	6% 10
	Gittysburg	3% 2
	Typhoon-v1	30% 32
	Replay 1	16% 8
	Bash considered harmful	8% 138		sbrk
	System Disaster	7% 141		sbrk
	Shared Objects Hijacking	12% 594		das
	k8s	10% 168		sambecks
	DC-4	17% 163
	DC-6	30% 116
	HackDay-Albania	12% 24
	Gemini-Pentest-v2	12% 9
	DC-9	32% 111
	Billu-b0x	8% 36
	Kevgir-VM	15% 31
	lin.security_v1.0	42% 99
	Moonraker	10% 8
	OwlNest v1.0.2	9% 4
	Raven 2	12% 10
	Sambox v4	3% 109		sambecks
	Django unchained	23% 672		TiWim
	Billu-b0x2	9% 128
	BlackMarket	11% 69
	Gemini-Pentest-v1	7% 29
	Born2rootv2	33% 94
	Bee-box v1	6% 41
	Command Injection OS	18% 59
	DC-1	14% 349
	digitalworld.local - BRAVERY	11% 17
	digitalworld.local - DEVELOPMENT	8% 12
	DonkeyDocker v1	23% 18
	g0rmint	8% 11
	DC-7	27% 50
	Well-Known	10% 648		sm0k
	IMF	9% 9
	ARP Spoofing EcouteActive	0% 0		voydstack
	Windows - sAMAccountName spoofing	23% 280
	OpenClassrooms_SkillProgram_AD1	1% 104		Pixis, EtienneC
	CTFair	0% 0
	Windows - KerbeRoast	17% 596