SSRF Box

Date

Validations

1799 Compromissions 18%

Note  Notation

1
2
3
4
5
53 Votes

Description

Attention : this CTF-ATD is linked to the challenge "Server Side Request Forgery"

Your goal is simple: compromise the virtual environment "SSRF Box".

The validation password of challenge (Realist) is in the /root directory.

Compromission time

4 hours

Operating system

 linux

start this virtual environnement

CTF Results CTF Results for SSRF Box

Pseudo Virtual Environnement Attackers count Time start Environnement compromised in
Asuwiel SSRF Box 2 23 November 2018 at 12:53 1h16
- SSRF Box 1 23 November 2018 at 09:19 -
- SSRF Box 2 23 November 2018 at 05:01 -
xxxSetxxx SSRF Box 2 23 November 2018 at 04:12 0h30
- SSRF Box 0 23 November 2018 at 02:11 -

 176 Virtual Environnements

Results Name Validations Difficulty ↓↑  Difficulty Author Note  Notation
pas_valide Challenge SecuriTech 1% 13
pas_valide SP - Christophe 3% 3
pas_valide HackDay-Albania 11% 23
pas_valide Homeless 9% 13
pas_valide Kuya 22% 25
pas_valide Lampiao 8% 22
pas_valide Lazysysadmin 16% 56
pas_valide Node 20% 33
pas_valide Basilic 4% 19
pas_valide NullByte 26% 45
pas_valide SP - Eric 30% 40
pas_valide Gemini-Pentest-v2 13% 9
pas_valide The Ether : EvilScience 6% 10
pas_valide Typhoon-v1 33% 32
pas_valide Replay 1 16% 8
pas_valide Bash considered harmful 8% 138 sbrk
pas_valide System Disaster 7% 137 sbrk
pas_valide Shared Objects Hijacking 13% 565 das
pas_valide k8s 10% 168 sambecks
pas_valide DC-4 17% 159
pas_valide Gittysburg 3% 2
pas_valide Gemini-Pentest-v1 7% 29
pas_valide DC-7 27% 49
pas_valide Billu-b0x2 10% 123
pas_valide JIS-CTF-VulnUpload-CTF01 24% 30
pas_valide Kevgir-VM 16% 31
pas_valide lin.security_v1.0 43% 88
pas_valide Moonraker 11% 8
pas_valide OwlNest v1.0.2 10% 4
pas_valide Raven 2 13% 10
pas_valide Sambox v4 3% 104 sambecks
pas_valide Django unchained 22% 617 TiWim
pas_valide Billu-b0x 8% 34
pas_valide g0rmint 8% 11
pas_valide BlackMarket 11% 67
pas_valide Born2rootv2 34% 92
pas_valide Bee-box v1 6% 41
pas_valide Command Injection OS 19% 58
pas_valide DC-1 15% 347
pas_valide digitalworld.local - BRAVERY 11% 17
pas_valide digitalworld.local - DEVELOPMENT 9% 12
pas_valide DonkeyDocker v1 23% 16
pas_valide DC-6 30% 115
pas_valide DC-9 32% 109
pas_valide DeRPnStiNK 29% 41
pas_valide OpenClassrooms_SkP_Pentest_Web 0% 0
pas_valide Matrix terminal 6% 52
pas_valide Open My Vault 0% 0
pas_valide Windows - sAMAccountName spoofing 26% 198
pas_valide OpenClassrooms_SkillProgram_AD1 1% 64 Pixis, EtienneC