Craig Jed Comeling

CyBai-degradable

8th place

850 points


Solves

Challenge Category Value Time
UVE reflection Lumeya Care Reflection 0
Phase 3 - Prize Lumeya Care: Phase 3 - SSRF 100
Phase 3 - Clinic account Lumeya Care: Phase 3 - SSRF 25
Phase 3 - Chart OS Lumeya Care: Phase 3 - SSRF 20
Phase 2 - Admin flag Lumeya Care: Phase 2 - Middleware 25
Phase 2 - Admin status Lumeya Care: Phase 2 - Middleware 20
Phase 2 - Bypass value Lumeya Care: Phase 2 - Middleware 25
Phase 2 - Bypass header name Lumeya Care: Phase 2 - Middleware 25
Phase 2 - Middleware header Lumeya Care: Phase 2 - Middleware 20
Lab Activity 2: Lumeya Care Briefing 5
UVE reflection Amberport Harbor Reflection 0
Phase 3 - Root flag Amberport Harbor: Phase 3 - Privilege 100
Phase 3 - Root file name Amberport Harbor: Phase 3 - Privilege 15
Phase 3 - Become root Amberport Harbor: Phase 3 - Privilege 25
Phase 3 - Allowed file Amberport Harbor: Phase 3 - Privilege 15
Phase 3 - What sudo allows Amberport Harbor: Phase 3 - Privilege 15
Phase 3 - Escalate hint Amberport Harbor: Phase 3 - Privilege 15
Phase 2 - User flag Amberport Harbor: Phase 2 - Access 50
Phase 2 - Zip password Amberport Harbor: Phase 2 - Access 15
Phase 2 - Hidden file Amberport Harbor: Phase 2 - Access 15
Phase 2 - Locked archive Amberport Harbor: Phase 2 - Access 15
Phase 2 - Password Amberport Harbor: Phase 2 - Access 15
Phase 2 - Username Amberport Harbor: Phase 2 - Access 15
Phase 1 - Open TCP list Amberport Harbor: Phase 1 - Reconnaissance 10
Phase 1 - CISO name Amberport Harbor: Phase 1 - Reconnaissance 10
Phase 1 - Company name Amberport Harbor: Phase 1 - Reconnaissance 10
Phase 1 - robots.txt path Amberport Harbor: Phase 1 - Reconnaissance 10
Phase 1 - SSH port Amberport Harbor: Phase 1 - Reconnaissance 10
Phase 1 - FTP port Amberport Harbor: Phase 1 - Reconnaissance 10
Phase 1 - Website port Amberport Harbor: Phase 1 - Reconnaissance 10
Lab Activity 1: Amberport Harbor Briefing 5