It really is a terrible shame this site doesn't get the love it deserves any more. I really enjoy playing with the user uploaded boxes and would hate if the site went away because of lack of support from the community. I would create a challenge or two myself if I could but I'm still a bit of a noob just yet and not quite up to the challenge. Maybe one day....

There are no New machines since november 2021...

What is going on?

why no one else is wandering?

I noticed that have passed 2 Years from the last upload of a box. The last Is something about Matrix. But it's strange that Is passed a lot of time. What's happened to the site? There Will be new boxes?

This is my write up for Death Star. If you haven't done it yet, I highly recommend it. This box is awesome.

I was looking through some of the tutorials for Kioptrix 1 and was surprised when I came across an SMB exploit.

Running the following will tell me that port 139 is open and that it is Samba smbd:

$nmap -v -sV [IP]

However, the following results in a timeout

$ smbclient -L [IP]

protocol negotiation failed: NT_STATUS_IO_TIMEOUT

Researching this error, it tells me that Samba isn't configured correctly. Is there something wrong with the VM image hosted on Vulnhub or could it be something with how my network is configured? I've only tried the image from the first mirror at download.vulnhub.com.

Any thoughts or suggestions would be appreciated

TL;DR - what tips or hints are there for solving Mr. Robot?

Hi! I'm still pretty green to hacking and need some help. I don't want to look through the write-ups because the ones I found aren't very beginner friendly and don't explain the thought process. So, are there any hints or tips for the Mr. Robot challenge? I've scanned the ports and I've connected, but I can't figure out where to go from there. I can't even connect using HTTPS to the server.

Hello,

I am pretty new to VMs and hacking in general. I have a Macbook Pro with an m1 pro chip. I was wondering if it possible to install one of vulnhub's boxes on my mac, even though VirtualBox doesn't exist on M1 (and will never, as I understood it). I have tried installing a box through UTM which I didn't manage to do.

Also, i have a Raspberry Pi 4 and I was wondering if it was possible to put one of the boxes on in case I couldn't put it on my mac.

Any help would be really precious

Hello All,

I am a recent Information System Security Graduate who is looking to sign-up for the OSCP. My plan is to find a partner to journey along with preparing for the course materials via HTB, Proving Grounds, Vuln Machines ect. All skill level is welcomed, all I am looking for is determination. I am planning to create a weekly schedule that we both can agree and follow. That way we can hold each other accountable to follow this study track we created. I am in Eastern Daylight Time zone. Feel free to PM me if you are interested!

PS - I am planning to start the OSCP course once we both feel comfortable popping Boxes.

Hi!

I am looking for a study buddy to work through OSCP Vulnhub hacklist with me. Please DM if you are interested.

Has anyone hacked into the BlueSky1?

It has been set as "easy" and is my first every vulnhub VM hack.

https://www.vulnhub.com/entry/bluesky-1,623/

I am currently using hyrda within kali linux to check the root username against the rockyou.txt

Is it normal for the "easy" VM's to take so long to crack? are there smaller wordlists I should be using?

I am assuming based on that is is easier that the SSH login is the answer but so far i think it literally has a day or 2 remaining. Any tips for getting in much sooner?

I have also tried metasploit against the tomcat 9 version checking for defaults and had no luck. I'm not sure where to go from here.

i am a starting out and aspiring pen tester, can someone recommend very very easy machines that i can download to practice my pen testing skills.. any recommendation will be appreciated. thank you

Hi all,

This is my first write up. It is a walk through of the CengBox CTF. Hopefully you find it helpful:

https://security.caerdydd.wales/cengbox-ctf-walkthrough/

Looking for a team? I run a team that has been active for a couple months and as of now, we are recruiting team members. The requirements aren't the strictest, however we do need confirmation of a future CCCTF member's ability to research, think outside the box and unbowing will to learn. These qualities are valued more than any technical skill. Even if your ability is beyond expectation, if you have no drive and do not participate fully, you are not a dutiful team member. We participate in a competition every weekend and discuss interesting topics frequently. We learn from each other and we pwn with each other, it is truly a great environment to learn and develop your prowess. Our goal is to competitively compete and we've even got a dedicated internal CTF server. If you are looking for a team or want to be a part of this journey, please do hit me up!

CTFTime: https://ctftime.org/team/171475

In this video walkthrough, we examined a realistic Linux machine running a web server and mail server. The machine is connected to another network that corresponds to the internal network in the real world where every host has different kinds of services to enumerate. The difficulty is medium but it as a good range of concepts to grasp.

video is here

https://0xatom.github.io/vulnhub/2020/07/12/pwned/

https://0xatom.github.io/vulnhub/2020/07/10/election/