Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Couch

Hack into a vulnerable database server that collects and stores data in JSON-based document formats, in this semi-guided challenge.

Task 1: Resy Set Go

                                                  
Are you ready to take the challenge?
The machine may take up to 3 minutes to boot and configure

Answer the questions below

  1. Scan the machine. How many ports are open?

  2. What is the database management system installed on the server?

  3. What port is the database management system running on?

  4. What is the version of the management system installed on the server?

  5. What is the path for the web administration tool for this database management system?

  6. What is the path to list all databases in the web browser of the database management system?

  7. What are the credentials found in the web administration tool?

  8. Compromise the machine and locate user.txt

  9. Escalate privileges and obtain root.txt

Room Icon

Couch

Hack into a vulnerable database server that collects and stores data in JSON-based document formats, in this semi-guided challenge.

easy

45 min

12,132

User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off
                                                  
Are you ready to take the challenge?
The machine may take up to 3 minutes to boot and configure
Answer the questions below
Scan the machine. How many ports are open?

What is the database management system installed on the server?

What port is the database management system running on?

What is the version of the management system installed on the server?

What is the path for the web administration tool for this database management system?

What is the path to list all databases in the web browser of the database management system?

What are the credentials found in the web administration tool?

Compromise the machine and locate user.txt

Escalate privileges and obtain root.txt