ARP Spoofing Man In The Middle

Date

Validations

0 Compromissions 0%

Note  Notation

1
2
3
4
5
0 Vote

Description

Warning : This CTF ATD is linked to the challenge "ARP Spoofing - The man in the middle"

Your friend wasn’t at all pleased that you’d managed to take control of his network and retrieve his confidential information. So this time he made the task much harder by making the database password much more complex.

You still have access to your friend’s LAN with an attacking machine that you control.

The flag is in the database located on one of the network hosts.

  • Start the CTF-ATD "ARP Spoofing HommeDuMilieu"
  • Log in with SSH on the machine port 22222 (root:root)
  • There is no validation of the virtual environment with a /passwd

Do not hesitate to change the password of the root user in order to be alone on the machine to perform your manipulations.

Compromission time

4 hours

Operating system

 linux

start this virtual environnement

 177 Virtual Environnements

Results Name Validations Difficulty ↓↑  Difficulty Author Note  Notation
pas_valide Challenge SecuriTech 1% 13
pas_valide SP - Christophe 3% 3
pas_valide HackDay-Albania 11% 23
pas_valide Homeless 9% 13
pas_valide Kuya 22% 25
pas_valide Lampiao 8% 22
pas_valide Lazysysadmin 16% 56
pas_valide Node 19% 33
pas_valide Basilic 4% 19
pas_valide NullByte 26% 45
pas_valide SP - Eric 30% 40
pas_valide Gemini-Pentest-v2 13% 9
pas_valide The Ether : EvilScience 6% 10
pas_valide Typhoon-v1 33% 32
pas_valide Replay 1 16% 8
pas_valide Bash considered harmful 8% 138 sbrk
pas_valide System Disaster 7% 137 sbrk
pas_valide Shared Objects Hijacking 13% 567 das
pas_valide k8s 10% 168 sambecks
pas_valide DC-4 17% 160
pas_valide Gittysburg 3% 2
pas_valide Gemini-Pentest-v1 7% 29
pas_valide DC-7 27% 49
pas_valide Billu-b0x2 9% 123
pas_valide JIS-CTF-VulnUpload-CTF01 24% 30
pas_valide Kevgir-VM 16% 31
pas_valide lin.security_v1.0 44% 92
pas_valide Moonraker 11% 8
pas_valide OwlNest v1.0.2 10% 4
pas_valide Raven 2 13% 10
pas_valide Sambox v4 3% 104 sambecks
pas_valide Django unchained 22% 620 TiWim
pas_valide Billu-b0x 8% 34
pas_valide g0rmint 8% 11
pas_valide BlackMarket 11% 67
pas_valide Born2rootv2 34% 92
pas_valide Bee-box v1 6% 41
pas_valide Command Injection OS 19% 58
pas_valide DC-1 15% 348
pas_valide digitalworld.local - BRAVERY 11% 17
pas_valide digitalworld.local - DEVELOPMENT 9% 12
pas_valide DonkeyDocker v1 24% 17
pas_valide DC-6 30% 115
pas_valide DC-9 32% 109
pas_valide DeRPnStiNK 29% 41
pas_valide AppArmorJail1 0% 0 nivram
pas_valide Open My Vault 0% 0
pas_valide Windows - sAMAccountName spoofing 26% 202
pas_valide OpenClassrooms_SkillProgram_AD1 1% 69 Pixis, EtienneC
pas_valide CTFair 0% 0