Advanced, Rootable, Timed

dejavault / 0.0.0.0

5: Flags (app, 2:system, env, root)
1: Service
5,400 pts
Avg. headshot: 50,675 minutes

67%

Level 20 / Master Hax0r

Ckabos / 9th Place

3: Flags found
1: Service discovered
2,600 pts

Sometimes the smallest things can lead to the craziest of rides... Upload the right image type and the path for OpenMediaVault will be revealed to you.

There are many ways you can escalate don't be afraid to try out new things.

To start the challenge connect to http://10.0.40.28:1337/. Your timer starts from the first time you connect to the service.

1 Writeup by:

Activity Stream

Latest activity on the platform

Ckabos Gained access to data stored in environmental variables of dejavault for 900 points, 4 months ago
Ckabos Got the ETSCTF username flag from the /etc/passwd file of dejavault for 1300 points, 4 months ago
Ckabos Discovered an endpoint flag on dejavault for 300 points, 4 months ago
Ckabos Discovered a web service on target dejavault for 100 points, 4 months ago