SSRF Box

22 June 2018

1799 Compromissions 18%

53 Votes

Attention : this CTF-ATD is linked to the challenge "Server Side Request Forgery"

Your goal is simple: compromise the virtual environment "SSRF Box".

The validation password of challenge (Realist) is in the /root directory.

4 hours

linux

CTF Results for SSRF Box

Pseudo	Virtual Environnement	Attackers count	Time start	Environnement compromised in
Asuwiel	SSRF Box	2	23 November 2018 at 12:53	1h16
-	SSRF Box	1	23 November 2018 at 09:19	-
-	SSRF Box	2	23 November 2018 at 05:01	-
xxxSetxxx	SSRF Box	2	23 November 2018 at 04:12	0h30
-	SSRF Box	0	23 November 2018 at 02:11	-

Results	Name	Validations	Difficulty	Author	Note ↓↑
	OpenClassrooms - P3 - Cybersecurity Bootcamp_test	0% 0		Titouan
	Minotaur	20% 57
	DC416 - Basement	0% 0
	DC416 - Baffle	0% 0
	3mrgnc3 - D0Not5top v1.2	17% 19
	BSides-Vancouver-2018-Workshop	27% 47
	BLACKLIGHT	8% 40
	Hopital Bozobe	8% 228		sambecks
	ROP Primer: 0.2	9% 11
	IMF	9% 9
	Droopy: v0.2	21% 182
	Hell	2% 8
	Orcus	8% 36
	Sedna	11% 59
	Analougepond	13% 48
	brainpan3	6% 6
	DC416 - Dick Dastardly	0% 0
	Moonraker	11% 8
	Flick 1	8% 64
	Lampiao	8% 22
	OpenClassrooms - P4 - RAP US	0% 0
	C for C-cure	5% 15		nikost
	OpenClassrooms_SkP_Pentest_Web	0% 0
	sshocker	10% 157		Laluka
	Replay 1	16% 8
	Typhoon-v1	33% 32
	Kuya	22% 25
	OwlNest v1.0.2	10% 4
	HackDay-Albania	11% 23
	Gittysburg	3% 2
	Gemini-Pentest-v2	13% 9
	g0rmint	8% 11
	DonkeyDocker v1	23% 16
	digitalworld.local - DEVELOPMENT	9% 12
	Raven 2	13% 10
	The Purge	5% 14
	DepthB2R	26% 15
	Moth	20% 107
	LoBOTomy	4% 9
	Hackademic RTB1	19% 364
	Infernal Hades	6% 15
	Murdering Dexter	16% 49
	Ultimate LAMP	18% 148
	FristiLeaks 1.3	29% 215
	Fuku	5% 23
	pWnOS	32% 401
	Vulnix	2% 13
	Xerxes	3% 18
	BlackMarket	11% 67
	djangocatz	17% 175