Ransom Inc

Group Intro

Interested in more challenges like this? Dive deep into the offensive skills to solve them in the following course(s):

SEC642: Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques

Flags

0x01

Objective

Hey agent! A dark web ransomware gang is operating at large again, they built an API to deliver malware files for their client operators. If we can get access to their API we can infiltrate their network. Can you get yourself an API key?

http://ransom-inc.ooctf.com:8080

flag format is: flag{..}

[No content discovery required]

Solution

Ran out of time, did not perform any action on this objective.

0x02

Objective

Great now that you have access to the API, can you try exploiting the server? There is a flag located at /flag.txt.

Solution

Ran out of time, did not perform any action on this objective.