ARM FTP box

date

Validierung

73 Compromissions 5%

Bewertung  Bewertung

1
2
3
4
5
4 votes

Beschreibung

Attention : this CTF-ATD is linked to the challenge "ARM FTP Box"

My company asked me to develop a small FTP server for an IOT project. I found one on Github that should do the trick. Why reinvent the wheel?

If you can, find vulnerabilities on the FTP service and exploit them to get a shell on the machine, then find the way to get root privileges.

  • The FTP service is running on the TCP/2121 port.
  • Challenge validation password is in the /passwd-challenge file.
  • The CTF-ATD validation password is in the /passwd file.

Zeit der Kompromittierung

4 Stunden

Betriebssystem

 linux

diese virtuelle Umgebung starten

Ergebnisse des CTF alltheday Ergebnisse des CTF alltheday für ARM FTP box

Nickname Virtual Machine Anzahl der Angreifer Begonnen am Maschine kompromittiert in
- ARM FTP box 2 2. März 2019 zu  22:01 -
- ARM FTP box 0 27. Februar 2019 zu  18:01 -
- ARM FTP box 3 23. Februar 2019 zu  23:58 -
- ARM FTP box 0 22. Februar 2019 zu  19:46 -
- ARM FTP box 0 21. Februar 2019 zu  22:46 -

 175 Virtuals Environnements

Ergebnis Name Validierung Schwierigkeitsgrad  Schwierigkeitsgrad Autor Bewertung ↓↑  Bewertung
pas_valide Windows - ASRepRoast 35% 372
pas_valide VulnVoIP 17% 842
pas_valide SamBox v3 5% 330 sambecks
pas_valide Windows - Group Policy Preferences Passwords 25% 560
pas_valide DC-9 33% 106
pas_valide SP - Eric 30% 40
pas_valide zico2 21% 133 rafaveira3
pas_valide Texode 15% 154 Mhd_Root
pas_valide Holynix v1 24% 292
pas_valide The Ether : EvilScience 6% 10
pas_valide Kioptrix level 4 35% 460
pas_valide Kevgir-VM 17% 31
pas_valide /dev/random : Relativity 7% 97
pas_valide OpenClassrooms - P3 - Cybersecurity Bootcamp 0% 0
pas_valide Kioptrix level 3 33% 574
pas_valide Quaoar 4% 38
pas_valide Bluebox 2 - Pentest 3% 305 sambecks
pas_valide Windows - KerbeRoast 19% 408
pas_valide Acid: Reloaded 18% 176
pas_valide Shared Objects Hijacking 13% 553 das
pas_valide Websocket - 0 protection 6% 416 Worty
pas_valide Windows XP pro 01 5% 492 g0uZ
pas_valide End Droid 35% 1174
pas_valide Well-Known 10% 613 sm0k
pas_valide SamBox v2 13% 972 sambecks
pas_valide DC-1 15% 343
pas_valide BBQ Factory 6% 125 sm0k, dvor4x
pas_valide Texode_Back 8% 72
pas_valide DC-6 30% 111
pas_valide OpenClassrooms - P7 - Analyste SOC 0% 0
pas_valide Bulldog 27% 194
pas_valide Challenge SecuriTech 1% 13
pas_valide Lazysysadmin 16% 56
pas_valide SkyTower 24% 213
pas_valide Command Injection OS 18% 56
pas_valide Gemini-Pentest-v1 8% 29
pas_valide CsharpVulnJson 6% 14 notfound404
pas_valide CTFair 0% 0
pas_valide A bittersweet shellfony 12% 230 mayfly
pas_valide OpenClassrooms - DVWA 3% 84 Sh1n, EtienneC
pas_valide Metasploitable 12% 1714
pas_valide LAMP security CTF4 35% 2710
pas_valide Bee-box v1 6% 41
pas_valide /dev/random : Pipe 5% 235
pas_valide Basic pentesting 1 32% 4596
pas_valide Imagick 22% 1017 sambecks
pas_valide DeRPnStiNK 29% 41
pas_valide Billu-b0x2 11% 123
pas_valide k8s 10% 168 sambecks
pas_valide LAMP security CTF6 18% 602