Capture Returns

The developers have improved their login form since last time. Can you bypass it?

Task 1: General information

The company SecureSolaCoders had previously developed a login form. However, many people were able to bypass it due to the poor implementation. The developers have now fixed their previous mistakes to ensure that no users are able to both enumerate and exploit the new solution. Can you confirm that the login form is actually bulletproof?

Before we start, download the required files by pressing the Download Task Files button.

Answer the questions below

I have downloaded the capturereturns.zip file.

Task 2: Bypass the login form

Please wait approximately 3-5 minutes for the application to start.

You can find the web application at: http://MACHINE_IP

Answer the questions below

What is the value of flag.txt?

To access material, start machines and answer questions login.

Score updated

Before we start, download the required files by pressing the Download Task Files button.

Answer the questions below

I have downloaded the capturereturns.zip file.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.

Attacker machine

Status:Off

Lab machine

Status:Off

Please wait approximately 3-5 minutes for the application to start.

You can find the web application at: http://MACHINE_IP

Answer the questions below

What is the value of flag.txt?

Capture Returns

Task 1: General information

Answer the questions below

Task 2: Bypass the login form

Answer the questions below

Capture Returns

Task 1General informationTask includes a downloadable file

Task 2Bypass the login formTask includes a deployable machine

Set up your virtual environment

Ready to learn Cyber Security?