Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Bookstore

A Beginner level box with basic web enumeration and REST API Fuzzing.

Task 1: Bookstore

Bookstore is a boot2root CTF machine that teaches a beginner penetration tester basic web enumeration and REST API Fuzzing. Several hints can be found when enumerating the services, the idea is to understand how a vulnerable API can be exploited, you can contact me on twitter @siddhantc_ for giving any feedback regarding the machine.

Answer the questions below

  1. User flag

  2. Root flag

Room Icon

Bookstore

A Beginner level box with basic web enumeration and REST API Fuzzing.

medium

75 min

14,810

User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off
Bookstore is a boot2root CTF machine that teaches a beginner penetration tester basic web enumeration and Fuzzing. Several hints can be found when enumerating the services, the idea is to understand how a vulnerable API can be exploited, you can contact me on twitter @siddhantc_ for giving any feedback regarding the machine.
Answer the questions below
User flag

Root flag