Skip to main contentSkip to main content
Room Banner
Room Icon

VulnNet: dotpy

VulnNet Entertainment is back with their brand new website... and stronger?

medium

75 min

4,073

User profile photo.

To access material, start machines and answer questions login.

Yes, VulnNet Entertainment is back, and now security-focused. You are once again tasked to perform a penetration test including a web security assessment and a security audit.

  • Difficulty: Medium
  • Web Language: Python

This machine was designed to be a bit more challenging but without anything too complicated. A web application will require you to not only find a vulnerable endpoint but also bypass its security protection. You should pay attention to the output the website gives you. The whole machine is Python focused.

Note: While looking through web pages you might notice a domain vulnnet.com, however, it's not an actual vhost and you don't need to add it to your hosts list.

Icon made by Smashicons (opens in new tab) from www.flaticon.com (opens in new tab) (opens in new tab)

Answer the questions below
What is the user flag? (user.txt)

What is the root flag? (root.txt)