ARM FTP box

Date

Validations

73 Compromissions 4%

Note  Notation

1
2
3
4
5
4 Votes

Description

Attention : this CTF-ATD is linked to the challenge "ARM FTP Box"

My company asked me to develop a small FTP server for an IOT project. I found one on Github that should do the trick. Why reinvent the wheel?

If you can, find vulnerabilities on the FTP service and exploit them to get a shell on the machine, then find the way to get root privileges.

  • The FTP service is running on the TCP/2121 port.
  • Challenge validation password is in the /passwd-challenge file.
  • The CTF-ATD validation password is in the /passwd file.

Compromission time

4 hours

Operating system

 linux

start this virtual environnement

CTF Results CTF Results for ARM FTP box

Pseudo Virtual Environnement Attackers count Time start Environnement compromised in
- ARM FTP box 2 2 March 2019 at 22:01 -
- ARM FTP box 0 27 February 2019 at 18:01 -
- ARM FTP box 3 23 February 2019 at 23:58 -
- ARM FTP box 0 22 February 2019 at 19:46 -
- ARM FTP box 0 21 February 2019 at 22:46 -

 176 Virtual Environnements

Results Name Validations Difficulty  Difficulty Author Note  Notation
pas_valide Challenge SecuriTech 1% 13
pas_valide Windows XP pro 01 5% 496 g0uZ
pas_valide Exploit KB Vulnerable Web App 12% 306
pas_valide Holynix v1 24% 292
pas_valide Kioptrix level 2 25% 972
pas_valide Kioptrix level 3 32% 575
pas_valide Kioptrix level 4 35% 462
pas_valide LAMP security CTF4 35% 2723
pas_valide LAMP security CTF5 25% 3887
pas_valide LAMP security CTF6 18% 606
pas_valide Metasploitable 12% 1729
pas_valide Metasploitable 2 40% 8601
pas_valide Moth 20% 107
pas_valide pWnOS 32% 401
pas_valide Ubuntu 8.04 weak 5% 206 g0uZ
pas_valide Ultimate LAMP 18% 148
pas_valide VulnVoIP 17% 852
pas_valide VulnVPN 12% 60
pas_valide LAMP security CTF8 14% 291
pas_valide LAMP security CTF7 39% 891
pas_valide Hackademic RTB1 19% 364
pas_valide No Exploiting Me 14% 54
pas_valide SamBox v1 7% 723 sambecks
pas_valide SamBox v2 13% 985 sambecks
pas_valide RA1NXing Bots 7% 16
pas_valide Murdering Dexter 16% 49
pas_valide LoBOTomy 4% 9
pas_valide Vulnix 2% 13
pas_valide Xerxes 3% 18
pas_valide Infernal Hades 6% 15
pas_valide SkyTower 24% 213
pas_valide Bluebox - Microsoft Pentest 4% 419
pas_valide Acid: Reloaded 18% 176
pas_valide Acid: Server 12% 219
pas_valide CsharpVulnJson 6% 14 notfound404
pas_valide CsharpVulnSoap 9% 8
pas_valide /dev/random : Pipe 5% 236
pas_valide /dev/random : Relativity 7% 97
pas_valide /dev/random : Sleepy 4% 44
pas_valide brainpan1 4% 82
pas_valide LordoftheRoot 25% 230
pas_valide Flick 1 8% 64
pas_valide Flick 2 10% 10
pas_valide FristiLeaks 1.3 28% 215
pas_valide The Purge 5% 14
pas_valide SickOs: 1.1 13% 91
pas_valide Xerxes: 2.0.1 13% 20
pas_valide brainpan2 9% 22
pas_valide brainpan3 6% 6
pas_valide SAP Pentest 7% 293 iggy