Reverse shell for aspx pages:

Difficulty: Easy

Goal: Get the root shell i.e.(root@localhost:~#) and then obtain flag under /root).

Information: Your feedback is appreciated - Email: suncsr.challenges@gmail.com

Tested: VMware Workstation 16.x Pro (This works better with VMware rather than VirtualBox)

This year, we welcome tens of thousands of participants from around the world to solve holiday-themed challenges and attend Santa’s virtual conference.

KringleCon is moving to an exciting newly renovated location at the North Pole. This year, Santa and his team of hard-working elves embarked on the largest construction project ever seen at the North Pole - a big upgrade of Santa’s castle. We’ve added a huge new courtyard, extra floors, and a magical elevator. Construction is almost done, just in time for KringleCon!

To get to the North Pole and all the festivities, first review our Code of Conduct and Terms of Use, then sign in and hop onto the gondola for your ride up the mountain to Santa’s castle.

https://2020.kringlecon.com/invite

DevGuru is a fictional web development company hiring you for a pentest assessment. You have been tasked with finding vulnerabilities on their corporate website and obtaining root.

OSCP like ~ Real life based

Difficulty: Intermediate (Depends on experience)

I cannot tell you how many times I needed to have a quick and dirty way to transfer files in an engagement, so here are some that I have used before.