Listeria

☆ ☆ ☆ ☆ ☆ (0)

oscp, cpts, web Easy

Listeria started as a quick internal tool that was never meant to face the world. Then someone pointed a domain at it. A Friday afternoon deploy. No review. The developer responsible has since changed departments.

Points: Low 10, Medium 20, High 40, Critical 80

Scope

Static target (always on):
139.144.167.19:80  (HTTP)
139.144.167.19:22  (SSH)

Out of Scope

The RatCTF portal (ratctf.com) itself, the Kubernetes cluster and node infrastructure, other players' instances, denial-of-service, and social-engineering or physical attacks.

Rules of Engagement

Authorized practice testing only. Attack only your own assigned instance of this machine. Do not attack the RatCTF portal, shared cluster infrastructure, other players, or run denial-of-service. Find the user and root flags; write up your path. Hosted by The XSS Rat / RatCTF.

Report