Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Anthem

Exploit a Windows machine in this beginner level challenge.

Task 1: Website Analysis

This task involves you, paying attention to details and finding the 'keys to the castle'.

This room is designed for beginners, however, everyone is welcomed to try it out!

Enjoy the Anthem.

In this room, you don't need to brute force any login page. Just your preferred browser and Remote Desktop.

Please give the box up to 5 minutes to boot and configure.

Answer the questions below

  1. Let's run nmap and check what ports are open.

  2. What port is for the web server?

  3. What port is for remote desktop service?

  4. What is a possible password in one of the pages web crawlers check for?

  5. What CMS is the website using?

  6. What is the domain of the website?

  7. What's the name of the Administrator

  8. Can we find find the email address of the administrator?

Task 2: Spot the flags

Our beloved admin left some flags behind that we require to gather before we proceed to the next task..

Answer the questions below

  1. Anthem are hiring!

    What is flag 1?

  2. What is flag 2?

  3. What is flag 3?

  4. What is flag 4?

Task 3: Final stage

Let's get into the box using the intel we gathered.

Answer the questions below

  1. Let's figure out the username and password to log in to the box.(The box is not on a domain)

  2. Gain initial access to the machine, what is the contents of user.txt?

  3. Can we spot the admin password?

  4. Escalate your privileges to root, what is the contents of root.txt?

Room Icon

Anthem

Exploit a Windows machine in this beginner level challenge.

easy

45 min

51,890

User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off

This task involves you, paying attention to details and finding the 'keys to the castle'.

This room is designed for beginners, however, everyone is welcomed to try it out!

Enjoy the Anthem.

In this room, you don't need to brute force any login page. Just your preferred browser and Remote Desktop.

Please give the box up to 5 minutes to boot and configure.

Answer the questions below

Let's run nmap and check what ports are open.

What port is for the web server?

What port is for remote desktop service?

What is a possible password in one of the pages web crawlers check for?

What CMS is the website using?

What is the domain of the website?

What's the name of the Administrator

Can we find find the email address of the administrator?

Our beloved admin left some flags behind that we require to gather before we proceed to the next task..

Answer the questions below

Anthem are hiring!

What is flag 1?

What is flag 2?

What is flag 3?

What is flag 4?

Let's get into the box using the intel we gathered.

Answer the questions below

Let's figure out the username and password to log in to the box.(The box is not on a domain)

Gain initial access to the machine, what is the contents of user.txt?

Can we spot the admin password?

Escalate your privileges to root, what is the contents of root.txt?