{"id":7281,"date":"2019-05-27T13:42:43","date_gmt":"2019-05-27T11:42:43","guid":{"rendered":"https:\/\/www.iprog.it\/blog\/?p=7281"},"modified":"2019-05-27T13:42:43","modified_gmt":"2019-05-27T11:42:43","slug":"ctf-zico2-1-walkthrough","status":"publish","type":"post","link":"https:\/\/www.iprog.it\/blog\/sicurezza-informatica\/ctf\/ctf-zico2-1-walkthrough\/","title":{"rendered":"CTF: zico2: 1 Walkthrough"},"content":{"rendered":"

\"\"<\/a><\/p>\n

Hello dear friends, welcome back for another CTF Walkthrough. Today we will solve zico2<\/a> machine.<\/p>\n

Description<\/h2>\n

Zico’s Shop: A Boot2Root Machine intended to simulate a real world cenario<\/p>\n

Disclaimer:<\/p>\n

By using this virtual machine, you agree that in no event will I be liable for any loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of or in connection with the use of this software.<\/p>\n

You are about to load up a virtual machine with vulnerabilities. If something bad happens, it’s not my fault.<\/p>\n

Level: Intermediate<\/p>\n

Goal: Get root and read the flag file<\/p>\n

Description:<\/p>\n

Zico is trying to build his website but is having some trouble in choosing what CMS to use. After some tries on a few popular ones, he decided to build his own. Was that a good idea?<\/p>\n

Hint: Enumerate, enumerate, and enumerate!<\/p>\n

Thanks to: VulnHub<\/p>\n

Author: Rafael (@rafasantos5)<\/p>\n

Doesn’t work with VMware. Virtualbox only.<\/p>\n

\n

Information gathering<\/h2>\n

TCP Scanning<\/h3>\n

\"\"<\/a><\/p>\n

\n
\n
\n

Local File inclusion<\/h3>\n
\n
\n
\n

Analyzing the source code of the home page we can discover an interesting link: view.php?page=… <\/span>usually this is a sign of possible lfi<\/p>\n

\"\"<\/a><\/p>\n

\n
\n
\n

Bingo, the web app is vulnerable<\/p>\n