5 ms·

Related: Grey Hack is a fake OS, Network, Internet in a multiplayer game where the objective is to hack (including each other). It simulates many basic function

Related: Grey Hack is a fake OS, Network, Internet in a multiplayer game where the objective is to hack (including each other). It simulates many basic functions quite well (you can steal files, place files on other computers, install software, run commands from a command line, including imitations of many tools). You can also write your own programs.

actionfromafar 3y ago
When will someone go all in and release a hack game with hundreds of emulated real little servers of various operating systems and vulnerabilities?
- aa6ll 3y ago
  Isn’t hack the box already itching this?
- mikepurvis 3y ago
  At a certain point on the realism continuum, just get rid of the gamey parts and deliver someone a set of VM images that they have to boot up and break into. (Maybe that's actually what Hack the Box is, mentioned in the sibling— I hadn't heard of that and only looked briefly at the homepage for it.)
  - cmeacham98 3y ago
    > Maybe that's actually what Hack the Box is, mentioned in the sibling Hack the Box hosts the VM for you on their servers (and you connect to a VPN to get access), but it's effectively that. They release a box every so often (roughly monthly?) and users compete to collect the user/root flags. They also have a rotating selection of past boxes (and I think you get access to all of them if you pay them), so it's kind of like an "on demand" CTF.
- bee_rider 3y ago
  I’ve always thought it would be interesting to try something like that for a LARP. It would be fun to run in an “anything goes” type setup. Get a cheap raspberry pi and install some really old Linux kernel with plenty of well know holes. I’d worry about delineating between game-machines and real ones. It would have to be totally isolated from the real network I guess.
  - fragmede 3y ago
    That's what CTF at Defcon is like!
- t0astbread 3y ago
  Yeah, my employer does that. We call it "infrastructure". /s
- depressedpanda 3y ago
  Some time ago, I found a site that provided different variants of VMs you could download which contained exploits you could utilize to pwn the machines. There were also walkthroughs and guides available to teach you how to break in. Unfortunately I can no longer find the site, and my Google fu has failed me. Unlike Hack the Box, no signup was necessary, you could just download the VM and get started. Does anyone here know of any good alternatives they'd like to recommend?
  - sxldier 3y ago
    There is [vulnhub](https://www.vulnhub.com/ https://www.vulnhub.com/). There was another one that started with an “e” (it had Linux and code challenges too (e.g. here is the C code, exploit privilege escalation)). I remember a few years ago the site went down and a mirror was stood up under a different domain. Don’t have those links unfortunately. Edit. Found it: - What it used to be: https://web.archive.org/web/20180202211058/https://exploit-exercises.com/ https://web.archive.org/web/20180202211058/https://exploit-e... - Mirror: https://exploit.education/ https://exploit.education/ - Also can be downloaded at vulnhub: https://www.vulnhub.com/series/exploit-exercises,11/ https://www.vulnhub.com/series/exploit-exercises,11/

actionfromafar 3y ago

When will someone go all in and release a hack game with hundreds of emulated real little servers of various operating systems and vulnerabilities?

aa6ll 3y ago
Isn’t hack the box already itching this?
mikepurvis 3y ago
At a certain point on the realism continuum, just get rid of the gamey parts and deliver someone a set of VM images that they have to boot up and break into. (Maybe that's actually what Hack the Box is, mentioned in the sibling— I hadn't heard of that and only looked briefly at the homepage for it.)
- cmeacham98 3y ago
  > Maybe that's actually what Hack the Box is, mentioned in the sibling Hack the Box hosts the VM for you on their servers (and you connect to a VPN to get access), but it's effectively that. They release a box every so often (roughly monthly?) and users compete to collect the user/root flags. They also have a rotating selection of past boxes (and I think you get access to all of them if you pay them), so it's kind of like an "on demand" CTF.
bee_rider 3y ago
I’ve always thought it would be interesting to try something like that for a LARP. It would be fun to run in an “anything goes” type setup. Get a cheap raspberry pi and install some really old Linux kernel with plenty of well know holes. I’d worry about delineating between game-machines and real ones. It would have to be totally isolated from the real network I guess.
- fragmede 3y ago
  That's what CTF at Defcon is like!
t0astbread 3y ago
Yeah, my employer does that. We call it "infrastructure". /s
depressedpanda 3y ago
Some time ago, I found a site that provided different variants of VMs you could download which contained exploits you could utilize to pwn the machines. There were also walkthroughs and guides available to teach you how to break in. Unfortunately I can no longer find the site, and my Google fu has failed me. Unlike Hack the Box, no signup was necessary, you could just download the VM and get started. Does anyone here know of any good alternatives they'd like to recommend?
- sxldier 3y ago
  There is [vulnhub](https://www.vulnhub.com/ https://www.vulnhub.com/). There was another one that started with an “e” (it had Linux and code challenges too (e.g. here is the C code, exploit privilege escalation)). I remember a few years ago the site went down and a mirror was stood up under a different domain. Don’t have those links unfortunately. Edit. Found it: - What it used to be: https://web.archive.org/web/20180202211058/https://exploit-exercises.com/ https://web.archive.org/web/20180202211058/https://exploit-e... - Mirror: https://exploit.education/ https://exploit.education/ - Also can be downloaded at vulnhub: https://www.vulnhub.com/series/exploit-exercises,11/ https://www.vulnhub.com/series/exploit-exercises,11/