Hack the ch4inrulz: 1.0.1 (CTF Challenge)

Hello readers and welcome to another CTF challenge. This VM is made by Frank Tope as you’ll see in the very homepage on the server’s website (his resume). Nice touch, if I might add. Anyhow, you can download this VM from vulnhub here. The aim of this lab is to get root and read the congratulatory message written in the flag.

I would rate the difficulty level of this lab to be intermediate. Although, there were no buffer overflows or unnecessary exploit development, yet it did make us think a little.

Steps Involved:

1. Port Scanning and IP clutching.
2. Directory busting port 80.
3. Directory busting port 8011.
4. Discovering LFI vulnerability.
5. Discovering an HTML backup file.
6. Cracking password hash
7. Logging in /development
8. Uploading a PHP shell disguised as GIF file.
9. Bypassing the check and triggering the file to get a netcat shell.
10. Privilege escalation to get flag.

Alright then, let’s head into the VM all the way in.

Full Article Read Here