Relative Path Overwrite

Date

26 February 2024

Validations

109 Compromissions 10%

Note

2 Votes

Description

Warning : this CTF-ATD is linked to the challenge "Relative Path Overwrite".

A new file storage site has been launched. It aims to be light, secure and free, enabling anyone to store and access their files quickly. However, it seems that the developer made a small mistake in developing it. Can you spot it?

The web server is accessible on port 8080

WARNING: The bot doesn’t have access to the internet and files are cleared very regularly

Compromission time

2 hours

Operating system

linux

start this virtual environnement

176 Virtual Environnements

Results	Name ↓↑	Validations	Difficulty	Author	Note
	zico2	21% 133		rafaveira3
	sshocker	10% 156		Laluka
	root-me-spip	9% 101		real
	pWnOS	32% 400
	lin.security_v1.0	42% 86
	k8s	10% 168		sambecks
	getting-root-over-it-v1	9% 69
	g0rmint	8% 11
	djangocatz	17% 174
	digitalworld.local - DEVELOPMENT	9% 12
	digitalworld.local - BRAVERY	11% 17
	dasbox1	10% 110
	brainpan3	6% 6
	brainpan2	9% 22
	brainpan1	4% 82
	Xerxes: 2.0.1	13% 20
	Xerxes	3% 18
	Windows XP pro 01	5% 495		g0uZ
	Windows - sAMAccountName spoofing	26% 195
	Windows - krbtgt reuse	11% 133
	Windows - ZeroLogon	0% 0
	Windows - KerbeRoast	19% 449
	Windows - Group Policy Preferences Passwords	25% 584
	Windows - ASRepRoast	35% 407
	Well-Known	11% 622		sm0k
	Websocket - 0 protection	6% 437		Worty
	Vulnix	2% 13
	VulnVoIP	17% 851
	VulnVPN	12% 60
	Ultimate LAMP	18% 148
	Ubuntu 8.04 weak	5% 206		g0uZ
	Typhoon-v1	33% 32
	The Purge	5% 14
	The Pentesters: 64-Bit AppSec Primer	4% 3
	The Ether : EvilScience	6% 10
	Texode_Back	8% 75
	Texode	15% 156		Mhd_Root
	System Disaster	8% 137		sbrk
	SkyTower	24% 213
	SickOs: 1.1	13% 91
	Shared Objects Hijacking	13% 561		das
	Sedna	11% 59
	Sambox v4	3% 104		sambecks
	SamBox v3	5% 333		sambecks
	SamBox v2	13% 979		sambecks
	SamBox v1	7% 723		sambecks
	SSRF Box	18% 1758		sambecks
	SSH Agent Hijacking	26% 2359		mayfly
	SP - Eric	30% 40
	SP - Christophe	3% 3