A bittersweet shellfony

15 Dezember 2020

233 Compromissions 12%

9 votes

Attention : this CTF-ATD is linked to the challenge "A bittersweet shellfony"

My audio website was hacked. I know i have to fix an xss, but there is no admin interface and i haven’t clicked in any malicious link!

Please reproduce the way hackers got inside and tell me how they have done it!

4 Stunden

linux

176 Virtuals Environnements

Ergebnis	Name	Validierung	Schwierigkeitsgrad	Autor	Bewertung
	Challenge SecuriTech	1% 13
	Windows XP pro 01	5% 496		g0uZ
	Exploit KB Vulnerable Web App	12% 306
	Holynix v1	24% 292
	Kioptrix level 2	25% 972
	Kioptrix level 3	32% 575
	Kioptrix level 4	35% 462
	LAMP security CTF4	35% 2723
	LAMP security CTF5	25% 3887
	LAMP security CTF6	18% 606
	Metasploitable	12% 1729
	Metasploitable 2	40% 8601
	Moth	20% 107
	pWnOS	32% 401
	Ubuntu 8.04 weak	5% 206		g0uZ
	Ultimate LAMP	18% 148
	VulnVoIP	17% 852
	VulnVPN	12% 60
	LAMP security CTF8	14% 291
	LAMP security CTF7	39% 891
	Hackademic RTB1	19% 364
	No Exploiting Me	14% 54
	SamBox v1	7% 723		sambecks
	SamBox v2	13% 985		sambecks
	RA1NXing Bots	7% 16
	Murdering Dexter	16% 49
	LoBOTomy	4% 9
	Vulnix	2% 13
	Xerxes	3% 18
	Infernal Hades	6% 15
	SkyTower	24% 213
	Bluebox - Microsoft Pentest	4% 419
	Acid: Reloaded	18% 176
	Acid: Server	12% 219
	CsharpVulnJson	6% 14		notfound404
	CsharpVulnSoap	9% 8
	/dev/random : Pipe	5% 236
	/dev/random : Relativity	7% 97
	/dev/random : Sleepy	4% 44
	brainpan1	4% 82
	LordoftheRoot	25% 230
	Flick 1	8% 64
	Flick 2	10% 10
	FristiLeaks 1.3	28% 215
	The Purge	5% 14
	SickOs: 1.1	13% 91
	Xerxes: 2.0.1	13% 20
	brainpan2	9% 22
	brainpan3	6% 6
	SAP Pentest	7% 293		iggy