Trollcave Zafiyetli Makine Çözümü // Qwx

[B]Trollcave is a vulnerable VM, in the tradition of  [URL="https://tik.lat/i9vb5"] Vulnhub[/URL] and  [URL="https://tik.lat/ltKdS"] infosec wargames[/URL]  in general. You start with a virtual machine which you know nothing  about – no usernames, no passwords, just what you can see on the  network. In this instance, you'll see a simple community blogging  website with a bunch of users. From this initial point, you enumerate  the machine's running services and general characteristics and devise  ways to gain complete control over it by finding and exploiting  vulnerabilities and misconfigurations.[/B]
[B]Your first goal is to abuse the services on the machine to gain  unauthorised shell access. Your ultimate goal is to read a text file in  the root user's home directory root/flag.txt).[/B]
[B]This VM is designed to be holistic and fairly down to earth. I wanted  to simulate a real attack on a real website rather than just presenting  a puzzle box of disparate elements, and I wanted to a**** the more  esoteric vulnerable VMisms, like when you have to do signal processing  on an MP3 you found to discover a port-knocking sequence. Of course  there are always tradeoffs between what's realistic and what's optimally  fun/challenging, but I've tried to keep the challenges grounded.[/B]
[B]Because this is a VM that you're downloading, importing and booting,  one way to achieve this goal would be to mount the VM's hard disk. I  haven't encrypted the disk or done anything to prevent this, so if you  want to take that route, go ahead. I'm also not offering a prize or  anything for completing this VM, so know that it will be entirely  pointless.[/B]
[B]Because this is a VM running a real operating system with real services, there may be ways to get to root  that I did not intend. Ideally, this should be part of the fun, but if  they make the box entirely trivial I'd like to know about and fix them –  within reason. As of this release, I've installed all the updates  available for Ubuntu Server 16.04 LTS, but I cannot and will not attempt  to patch this VM against every new Linux kernel exploit that comes out  in the future. So there's a hint – you don't have to use a kernel  exploit to root this box.[/B]
[B]What you will need is a good HTTP intercepting proxy – I recommend  [URL="https://tik.lat/gYvSO"] Burpsuite[/URL] – and a couple of network tools like nmap and nc. You'll also need some virtualisation software –  [URL="https://tik.lat/cpFo7"] VirtualBox[/URL] will be easiest for most people, but KVM and VMWare should also be able to import the .ova file after a bit of fiddling. Once you've imported the VM, put it on the same network as your attacking system ( [URL="https://tik.lat/PI7KB"] preferably don't give it internet access[/URL]) and start hacking![/B]
[B]You can grab the .ova file here ( [URL="https://tik.lat/Q7q8s"] 929MB[/URL]) (updated 2018-03-19). Let me know what you think.[/B]
[B]  Doesn't work with VMware. Changelog v1.1 - 19/03/2018 v1.2 - 21/03/2018 [/B]