Fuku

Date

Validations

23 Compromissions 4%

Note  Notation

1
2
3
4
5
3 Votes

Description

Fuku (pronounced "far queue") CTF is designed to fuck with people.

There are a few flag.txt files to grab. The final one is in the /passwd file. However, the ultimate goal is to get a root shell.

Scenario

"Bull was pissed when you broke into his Minotaur box. He has taken precautions with another website that he is hosting, implementing IDS, whitelisting, and obfuscation techniques. He is now taunting hackers to try and hack him, believing himself to be safe. It is up to you to put him in his place."

Hints

Some scripting will probably be needed to find a useful port.
If the machine seems to go down after a while, it probably hasn’t. This CTF isn’t called Fuku for nothing!

Author: Robert Winkel

Compromission time

4 hours

Operating system

 linux

start this virtual environnement

CTF Results CTF Results for Fuku

Pseudo Virtual Environnement Attackers count Time start Environnement compromised in
- Fuku 1 2 March 2019 at 20:12 -
- Fuku 1 23 February 2019 at 18:30 -
- Fuku 1 23 February 2019 at 18:02 -
- Fuku 1 23 February 2019 at 17:52 -
- Fuku 1 23 February 2019 at 17:24 -

 178 Virtual Environnements

Results Name Validations Difficulty  Difficulty Author Note  Notation
pas_valide Challenge SecuriTech 1% 13
pas_valide Windows XP pro 01 5% 502 g0uZ
pas_valide Exploit KB Vulnerable Web App 12% 307
pas_valide Holynix v1 24% 292
pas_valide Kioptrix level 2 24% 975
pas_valide Kioptrix level 3 32% 576
pas_valide Kioptrix level 4 34% 464
pas_valide LAMP security CTF4 34% 2751
pas_valide LAMP security CTF5 25% 3918
pas_valide LAMP security CTF6 18% 610
pas_valide Metasploitable 12% 1745
pas_valide Metasploitable 2 39% 8781
pas_valide Moth 20% 107
pas_valide pWnOS 31% 405
pas_valide Ubuntu 8.04 weak 5% 206 g0uZ
pas_valide Ultimate LAMP 18% 149
pas_valide VulnVoIP 17% 872
pas_valide VulnVPN 12% 60
pas_valide LAMP security CTF8 14% 292
pas_valide LAMP security CTF7 39% 897
pas_valide Hackademic RTB1 19% 365
pas_valide No Exploiting Me 14% 54
pas_valide SamBox v1 7% 740 sambecks
pas_valide SamBox v2 13% 1006 sambecks
pas_valide RA1NXing Bots 7% 16
pas_valide Murdering Dexter 16% 49
pas_valide LoBOTomy 4% 9
pas_valide Vulnix 2% 14
pas_valide Xerxes 3% 18
pas_valide Infernal Hades 6% 15
pas_valide SkyTower 24% 217
pas_valide Bluebox - Microsoft Pentest 4% 426
pas_valide Acid: Reloaded 18% 178
pas_valide Acid: Server 11% 219
pas_valide CsharpVulnJson 5% 14 notfound404
pas_valide CsharpVulnSoap 9% 8
pas_valide /dev/random : Pipe 5% 238
pas_valide /dev/random : Relativity 7% 99
pas_valide /dev/random : Sleepy 4% 47
pas_valide brainpan1 4% 83
pas_valide LordoftheRoot 25% 233
pas_valide Flick 1 8% 65
pas_valide Flick 2 9% 10
pas_valide FristiLeaks 1.3 28% 217
pas_valide The Purge 5% 14
pas_valide SickOs: 1.1 13% 91
pas_valide Xerxes: 2.0.1 13% 20
pas_valide brainpan2 9% 22
pas_valide brainpan3 6% 6
pas_valide SAP Pentest 7% 293 iggy