Got User flag for Vulnyx (Shop) CTF #CyberSecurity Educational only

@declanmidd

40.0K followers · usually 2.5K views a post

Views

7.4K

Likes

483

Comments

1

Shares

12

Selling · Other Product

Vulnyx (Shop) CTF

Why it worked

The video demonstrates a practical cybersecurity technique (SQL injection) on a specific target (shop.nyx CTF), appealing to an audience interested in ethical hacking and cybersecurity challenges. The clear, step-by-step demonstration of gaining access makes it educational and engaging.

Summary

The creator demonstrates how to exploit a blind SQL injection vulnerability on the shop.nyx website to gain root access. They successfully dump the user table from the database to obtain credentials, thereby accessing the machine.

Structure

1Connect to shop.nyx via SSH
2List files and view user.txt
3Identify blind SQL injection vulnerability
4Dump user table to get credentials
5Gain root access to the machine

Product placement

Vulnyx (Shop) CTF: This is a Capture The Flag (CTF) challenge that the creator is using to demonstrate a vulnerability. Removing it would change the video's topic. It acts as the subject of the video. shop.nyx: This is the domain name of the web application being targeted. Removing it would make it unclear what is being accessed. It acts as the subject of the video. Kali Linux: This is the operating system used by the creator to perform the hacking demonstration. Removing it would not change the video's outcome, but it is the tool used. It acts as a substrate. OpenSSH: This is the protocol used to connect to the server. Removing it would not change the video's outcome. It acts as a substrate. linktr.ee: This is a link aggregator in the creator's bio. Removing it would not change the video's content. It merely appears.

Original caption

Got User flag for Vulnyx (Shop) CTF #CyberSecurity Educational only

More from @declanmidd

Their other posts in the index, biggest breakout first.

On-screen text

Not secure shop.nyx/administrator/index.php Session Actions Edit View Help kali@kali: ~ kali@kali: ~ ssh bart@shop.nyx The authenticity of host 'shop.nyx (192.168.1.13)' was added to the list of known hosts. ED25519 key fingerprint is: SHA256:6B7Eq7tDKYRhg... Are you sure you want to continue connecting (yes/no/[fingerprint])? yes Warning: Permanently added 'shop.nyx' (ED25519) ** WARNING: Connection is not using a post-quantum secure cipher ** ** This session may be vulnerable to "store now, store later" attacks. ** The server may need to be upgraded. See https://www.openssh.com/txt/draft-ietf-secsh-ssh2-24.txt bart@shop:~ $ ls user.txt bart@shop:~ $ cat user.txt 598a05f84190e327bc4796335d948144 bart@shop:~ $ Login username password Send

Transcript

Got User flag for Vulnyx (Shop) CTF #CyberSecurity Educational only So, we actually gained access to the shop.nyx website, and we're going to try and gain access to the root user. So we actually need to actually gain access to the root user, okay? So that was pretty simple, straightforward web application demo, which had a SQL floor, a blind SQL injection vulnerability. And we managed to get past that by dumping the database table, the users table. And the database web app. Now we have access to the machine. We've got the credentials by dumping the database, the users table, and the database web app. So, we actually gained access to the shop.nyx website, and we're going to try and gain access to the root user. So we actually need to actually gain access to the root user, okay? So that was pretty simple, straightforward web application demo, which had a SQL floor, a blind SQL injection vulnerability. And we managed to get past that by dumping the database table, the users table. And the database web app. Now we have access to the machine. We've got the credentials by dumping the database, the users table, and the database web app.