RedHatAugust/symfonos-3.1 v0.01

Taken from https://www.vulnhub.com/entry/hemisphere-gemini,596/ About Release: Name: Hemisphere: Gemini Date release: 06 Nov 2020 Author: d4t4s3c Series: Hemisphere Description: Difficulty: Easy Flag: 2 (user & root) Enumeration | Web Application | Privilege Escalation This works better with VirtualBox rather than VMware Vagrant box made by RedHatAugust

RedHatAugust/Its-October-1 v0.01

Taken from https://www.vulnhub.com/entry/its-october-1,460/ About Release: Name: It's October: 1 Date release: 08 Apr 2020 Author: Akanksha Sachin Verma Series: It's October Description: Welcome to "It’s October" This boot to root VM is designed for testing your pentesting skills and concepts. It consists of some well known things but it encourages you to use the functionalities rather than vulnerabilities of target. Goal: Get the root flag of the target. Difficulty: Easy/Medium Level Need hints? Twitter @akankshavermasv DHCP is enabled Your feedback is really valuable for me! Twitter @akankshavermasv Was there something that you didn’t like about this VM? Please let me know so that I can make more interesting challenges in the future. Good Luck..!!! Vagrant box made by RedHatAugust

RedHatAugust/TBBT-2-FunWithFlags v0.01

Taken from https://www.vulnhub.com/entry/tbbt-2-funwithflags,461/ About Release: Name: TBBT: 2 - FunWithFlags Date release: 10 Apr 2020 Author: emaragkos Series: TBBT Description: TBBT2: FunWithFlags ______ _ _ _ _ _ ______ _ | ___| | | | (_) | | | | ___| | | |_ _ _ _ __ | | | |_| |_| |__ | |_ | | __ _ __ _ ___ | _| | | | '_ \ | |/\| | | __| '_ \ | _| | |/ _` |/ _` / __| | | | |_| | | | | \ /\ / | |_| | | | | | | | (_| | (_| \__ \ \_| \__,_|_| |_| \/ \/|_|\__|_| |_| \_| |_|\__,_|\__, |___/ __/ | |___/ Welcome to "Fun with Flags" 2! This boot2root machine is part of the TBBT Fun with Flags series and it is themed after the famous TV show, The Big Bang Theory and has really strong CTF elements. It's more like solving a set of interesting CTF challenges as a puzzle than facing these in a real life scenario. Goal: Hack Sheldon and get user and root flags Difficulty: Intermediate but if you have never watched the series I would rate it as hard, still solvable though Runs only with VirtualBox! DHCP is enabled Need hints? Tweet @emaragkos Your feedback is really valuable for me! Was there something that you didn’t like about it? Maybe something you have liked more if it was different? Good luck and have fun :) This will only work with VirtualBox (and not VMware). Vagrant box made by RedHatAugust

RedHatAugust/HackNos-Player-1.1 v0.01

Taken from https://www.vulnhub.com/entry/hacknos-player-v11,459/ About Release: Name: hackNos: Player v1.1 Date release: 10 Apr 2020 Author: Rahul Gehlaut Series: hackNos Description: Difficulty: Intermediate Learning: Web Application | Enumerate | Good Enumeration | Privilege Escalation Overview: Tested: VirtualBox/VMWare Virtual Machine: - Format: Virtual Machine Virtualbox OVA Networking: - DHCP Service: Enabled twitter @rahul_gehlaut ## Changelog v1.1 - 2020-04-10 v1.0 - 2020-04-07 Vagrant box made by RedHatAugust

RedHatAugust/DMV-1 v0.01

Taken from https://www.vulnhub.com/entry/dmv-1,462/ About Release: Name: DMV: 1 Date release: 12 Apr 2020 Author: Jonathan Series: DMV Description: It is a simple machine that replicates a real scenario that I found. The goal is to get two flags, one that is in the secret folder and the other that can only be read by the root user This works better with VirtualBox rather than VMware. Vagrant box made by RedHatAugust

RedHatAugust/CK-03 v0.01

Taken from https://www.vulnhub.com/entry/ck-03,464/ About Release: Name: CK: 03 Date release: 13 Apr 2020 Author: Vishal Biswas Series: CK Description: This box is upgraded edition of previous (MyFileServer 2) box. Multiple way to get user and root flags are added. Ping me on twitter @CyberKnight00 if you face any difficulty. Don't stop after finding 1 way there are more ways. This works better with VirtualBox than VMware. Vagrant box made by RedHatAugust

RedHatAugust/My-Web-Server-1 v0.01

Taken from https://www.vulnhub.com/entry/my-web-server-1,463/ About Release: Name: My Web Server: 1 Date release: 13 Apr 2020 Author: Akanksha Sachin Verma Series: My Web Server Description: Welcome to "My Web Server" This boot to root VM is designed for testing your pentesting skills and concepts. It consists of some well known things but it encourages you to use the functionalities rather than vulnerablities of target. Goal: Get the root flag of the target. Difficulty: Medium/Intermediate Level Need hints? Twitter @akankshavermasv DHCP is enabled Your feedback is really valuable for me! Twitter @akankshavermasv Was there something that you didn’t like about this VM? Please let me know so that I can make more interesting challenges in the future. Good Luck..!!! This works better with VirtualBox rather than VMware. Vagrant box made by RedHatAugust

RedHatAugust/42Challenge-1 v0.01

Taken from https://www.vulnhub.com/entry/42challenge-1,465/ About Release: Name: 42Challenge: 1 Date release: 14 Apr 2020 Author: x4v1l0k Series: 42Challenge Description: This box has been designed for the "42" Programming School. It is designed to be able to practice different techniques within it in different privilege scale methods. Title: 42Challenge Difficulty: Beginner/Intermediate. Goal: Get the 7 flags. DHCP: Enabled. If you need hints, write me on twitter @x4v1l0k. I would like to know your feedback on twitter @x4v1l0k. This works better with VirtualBox than VMware. Vagrant box made by RedHatAugust

RedHatAugust/Minouche-1 v0.01

Taken from https://www.vulnhub.com/entry/minouche-1,466/ About Release: Name: Minouche: 1 Date release: 16 Apr 2020 Author: Frans Gostman Series: Minouche Description: N/A This works better with VirtualBox than VMware. Vagrant box made by RedHatAugust

RedHatAugust/CryptoBank-1 v0.01

Taken from https://www.vulnhub.com/entry/cryptobank-1,467/ About Release: Name: CryptoBank: 1 Date release: 18 Apr 2020 Author: emaragkos Series: CryptoBank Description: Welcome to CryptoBank, the best Crypto platform to store and trade your crypto assets, join now! Our platform uses advanced technology to protect your assets. Our experienced engineers have taken extra measures to keep our infrastructure secure. Goal: Hack the CryptoBank in order to reach their cold Bitcoin wallet (root flag) Difficulty: Intermediate -It was implemented in VirtualBox but should work in VMware too -DHCP is enabled Need hints? Tweet @emaragkos Your feedback is really valuable for me! Was there something that you didn’t like about it? Maybe something you have liked more if it was different? Good luck and have fun :) This works better with VirtualBox than VMware. Vagrant box made by RedHatAugust

RedHatAugust/BlueSky-1 v0.01

Taken from https://www.vulnhub.com/entry/bluesky-1,623/ About Release: Name: BlueSky: 1 Date release: 10 Dec 2020 Author: SunCSR Team Series: BlueSky Description: Difficulty: Easy Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root). Information: Your feedback is appreciated - Email: suncsr.challenges@gmail.com Tested: VMware Workstation 16.x Pro (This works better with VMware rather than VirtualBox) Vagrant box made by RedHatAugust RedHatAugust Notes: The screen wasn't visible (couldn't see login) when the machine was powered on. The system is still working

RedHatAugust/y0usef-1 v0.01

Taken from https://www.vulnhub.com/entry/y0usef-1,624/ About Release: Name: y0usef: 1 Date release: 10 Dec 2020 Author: y0usef Series: y0usef Description: Get two flag Difficulty : easy This works better with VirtualBox rather than VMware Vagrant box made by RedHatAugust

RedHatAugust/Jetty-1 v0.01

Taken from https://www.vulnhub.com/entry/jetty-1,621/ About Release: Name: Jetty: 1 Date release: 09 Dec 2020 Author: MrSquid Series: Jetty Description: The company Aquarium Life S.L. has contacted you to perform a pentest against one of their machines. They suspect that one of their employees has been committing fraud selling fake tickets. They want you to break into his computer, escalate privileges and search for any evidences that proves this behaviour. ZIP Password: EsSabad0! Extra information: The suspicious username is Squiddie. He was in charge of the ticket selling for the Aquarium. Ethernet settings set to NAT with DHCP enabled. You should find the IP in your VLAN. The idea of the machine it is not just to gain root privileges but obtaining all the evidences to prove that the user was commiting fraud. Difficulty: I would say the machine is Medium regarding gaining root privileges. If we consider all the steps to obtain the evidences, Hard. Vagrant box made by RedHatAugust

RedHatAugust/Chill-Hack-1 v0.01

Taken from https://www.vulnhub.com/entry/chill-hack-1,622/ About Release: Name: Chill Hack: 1 Date release: 09 Dec 2020 Author: Anurodh Acharya Series: Chill Hack Description: Difficulty: Easy/Intermediate Flag: 2 (User and root) Hint: Enumeration Chill Hack is a simple machine which provides common and real world vulnerabilities (tested on VMware Workstation 15). Make sure not to give to less resources while running it. Your feedback is really valuable, do let me know so that I can make more interesting challenges. Good Luck..!! Vagrant box made by RedHatAugust

RedHatAugust/Stripes-1 v0.01

Taken from https://www.vulnhub.com/entry/hemisphere-gemini,596/ About Release: Name: Stripes: 1 Date release: 21 Apr 2020 Author: K. Jagdmann Series: Stripes Description: An easy to intermediate, TIGER KING themed boot2root. Why is this "Tiger King" themed!? Well I decided to put my first CTF together, and needed some ideas for the blog. Lo and behold, Joe Exotic appeared on TV and thus, this CTF was made. Can you help Joe escape from prison? There are no off the shelf exploits here, and bruteforcing will get you nowhere. You will need to perform manual investigation and enumeration. Multiple ways to achieve root, ranging from beginner to medium difficulty. This works better with VirtualBox rather than VMware Vagrant box made by RedHatAugust

RedHatAugust/DevGuru-1 v0.01

Taken from https://www.vulnhub.com/entry/devguru-1,620/ About Release: Name: DevGuru: 1 Date release: 07 Dec 2020 Author: Zayotic Series: DevGuru Description: DevGuru is a fictional web development company hiring you for a pentest assessment. You have been tasked with finding vulnerabilities on their corporate website and obtaining root. OSCP like ~ Real life based Difficulty: Intermediate (Depends on experience) Vagrant box made by RedHatAugust

RedHatAugust/Inferno-1.1 v0.01

Taken from https://www.vulnhub.com/entry/inferno-11,603/ About Release: Name: Inferno: 1.1 Date release: 06 Dec 2020 Author: mindsflee Series: Inferno Description: Users: 2 Difficulty Level: Easy/Medium Real Life machine vs CTF. Midway upon the journey of our life I found myself within a forest dark, For the straightforward pathway had been lost. Ah me! how hard a thing it is to say What was this forest savage, rough, and stern, Which in the very thought renews the fear. About the VM: Just download, extract and load the .ova file in VMware Workstation or Virtual Box. The adapter is currently bridge, networking is configured for DHCP and IP will get assigned automatically Contact: You can contact me on Hack the box (https://www.hackthebox.eu/profile/232477) or by email (mindsflee@hotmail.com) for hints! This works better with VirtualBox rather than VMware ## Changelog 2020-12-06 - v1.1 2020-11-17 - v1.0 Vagrant box made by RedHatAugust

RedHatAugust/Cybox-1.1 v0.01

Taken from https://www.vulnhub.com/entry/cybox-11,607/ About Release: Name: Cybox: 1.1 Date release: 06 Dec 2020 Author: Victor Garcia Series: Cybox Description: Will you be able to compromise the internal server of the CYBOX company? Difficulty: Medium Objective: Get user.txt and root.txt This works better with VirtualBox rather than VMware. Contact: @takito1812 ## Changelog 2020-12-06 - 1.1 2020-11-21 - 1.0 Vagrant box made by RedHatAugust

RedHatAugust/hackme-2 v0.01

Taken from https://www.vulnhub.com/entry/hackme-2,618/ About Release: Name: hackme: 2 Date release: 06 Dec 2020 Author: x4bx54 Series: hackme Description: 'hackme2' is a medium difficulty level box. This is the second part of the hackme series where more controls are in place do deter malicious attacks. In addition, you will have to think out of the box to exploit the vulnerabilites. The goal is to gain limited privilege access via web vulnerabilities and subsequently, privilege escalate as a root user. The lab was created to mimic real world web vulnerabilities. 'hackme2' uses DHCP and in the possible event that the mysqld shuts down on its own (very rare cases), attempt to force restart the machine and it should be working fine subsequently. Vagrant box made by RedHatAugust

RedHatAugust/LinESC-1 v0.01

Taken from https://www.vulnhub.com/entry/linesc-1,616/ About Release: Name: LinESC: 1 Date release: 05 Dec 2020 Author: Muhammed Nasef Series: LinESC Description: LinEsc is a machine built to demonstrate the 7 most common ways of Linux privilege escalation. Target: get root privileges with 7 different ways. Default credentials : (muhammad:nasef) Vagrant box made by RedHatAugust