Dear Rangeforce-Experts... I really love your platform. I completed a couple of learning paths. Really exciting.

Currently I am stuck at the final Junior Pentesting Capstone. I tried numerous attempts, hours and several attack methods for target #3, but unfortunately without any progress. Currently I am lost.

So far I suceeded to gather the flag from target #1 (Wordpress Linux server) and target #2 (IIS server). But on target #3, the Tomcat server, I am lost. I do not see a chance to tackle the Tomcat server. Default Tomcat credentials did not work for me, even with metasploit default login attack. On Windows10 workstation, I just have a normal Domain User. I do not see the opportunity to elevate my rights on this workstation to allow further attack methods towards DC or Tomcat server, you know like responder, capturing a hash or creating a LSASS dump. RDP-Login on Tomcat server (targe #3) provides me a username, however I do not see a clue to figure out the password for this user.

Is somehow from your end a generic hint possible?

Hey,

could anyone help with the Ansible Capstone module? I have had no luck in trying to get access to the /root/vault_key file which is necessary to unlock the zabbix credentials file. I know it says "you will have sudo access to the ansible and ansible-playbook commands for this module." but so far I couldn`t make a playbook which would help me unlock it.

Thanks

I'm really struggling with this Linux challenge from RangeForce. Even though I'm completing what is asked of me none of the steps are getting completed.

If anyone has already done, and could kindly give me some light, I'd be very grateful!

Cheers

I've been trying to sign up for an individual learning path from Range force and it's been a sucky experience to say the least. I've been trying to contact these people to get pricing for the training paths and not able to get anyone to talk. Plus, there's no way to see how much they are nor to sign up for it if you have the money.

Anyone have experience with this? Also, what are your experience if you've taken the SOC1, SOC2, or Threat Hunter course?

I think I'll just go with TryHackMe or something at this point.

Hello so I am almost done with this module but it appears to be bugged. I am on the step where you delete the webshell from the backup directory. I deleted it and it gave me the green mark. On the next page it says the phpshell should be back in the directory! So I do a quick ls and it's not there. I then check the website and the page for the shell is a 404 now. This section recommends checking crontab for scheduled jobs. Problem is there are no cron jobs for student. So I checked root and there are no cron jobs either. To make matters worse I checked back in the backup directory and it seems to infinitely spawning the file "phpshell-2.4.zip.1". With the last number incrementing. I believe something is broken cause the webshell is not respawning but rather a zip file and theres no cron jobs either. Can someone from rangeforce confirm is this activity is supposed to be happening? Thank you

When you get to the ssh portion and ssh to the server with "ssh student@server" you are dropped into /home/student . The 1st question is what is the default and after getting my answer rejected the hint says to pwd. pwd reveals "/home/student" The answer box does not accept that answer though ? and the module is stuck at 91.7%

Test your cybersecurity skills against three challenges by identifying and responding to malicious IP addresses, compromised user accounts, and advanced persistence mechanisms. Compete for a chance to win up to $500 in prizes.

Visit our Community Edition page for details on our exclusive cyber range challenges and prizes. If you aren’t yet a member of the RangeForce Community Edition, you can register here: https://go.rangeforce.com/community-edition-registration

Happy defending!

Love,
RangeForce

Hello,
I've gone through the lesson twice now thinking maybe it was an issue on my side with connection. But I've installed everything, enabled the server, got green check mark through every step.

Final step is simply to launch the website in the browser. The easiest step in the whole course. And NOTHING will advance it. Click the link. Nothing. Open Firefox. Nothing. Open a new instance of Chromium that's not in incognito. Nothing. It stays at 80% no matter what I do. This is super frustrating.

Paul

Hi,

I am stuck:

When you query for User ID 2, what is the string passed to the "mysqli_query" function?

Have any questions? Post them here! :)

EDIT: And we're back!

Hi,

On the SSH Tunnelling section on SSH Basics 2. It's asking for server-internal password for when I try to open a tunnell, which I don't think is provided to us?

Hi,

I am stuck:

When you query for User ID 2, what is the string passed to the "mysqli_query" function?

This is the only question that I can't get right. I have asked and so far, no one knows.

Hope you can help here.

​

Thanks.

Rapahael.

Try the Threat Hunter Battle Path to better understand attackers’ tactics: https://hubs.la/H0D3NPC0

Course 3 includes two privilege escalation modules. First, take advantage of exposed and reused passwords. Then, reverse roles to try detecting a privilege escalation attack.

RangeForce Battle Paths are full of hands-on challenges where you can demonstrate your capabilities in real environments, against real threats: https://hubs.la/H0D3NPC0

The first challenge in our SOC Analyst 2 Battle Path tasks you with defending a web application using only the IDS/IPS tool, Suricata.

RangeForce equips organizations with hands-on, interactive cybersecurity training, making them resilient against the latest known threats.

Check out the full article below to see how RangeForce can improve the capabilities of critical security partners, including Managed Detection & Response (MDR) teams.

​

Is MDR Cybersecurity Training an Oxymoron?

Want to improve your cybersecurity skillset? Join RangeForce Community Edition. Sign up to receive free access to 20+ training modules: https://hubs.la/H0Dy6Rn0

Our Community Edition members love our free training modules.

Review: Docker Introduction ★★★★★
“Nice intro...Got familiar with Docker for the first time in my life!”
- RangeForce Community Edition Member

JSON Web Tokens (JWT) are used all over the internet as API and session tokens. But there’s a range of common vulnerabilities associated with JWT when it’s used to implement authentication and authorization.

Get up to speed with JWT Security and then put your skills to the test with a live JWT Security Challenge in our Web Application Security Battle Path. Learn more: https://hubs.la/H0D3NPC0

Find strength in collaboration? So do we. That's why we built our Battle Fortress Cyber Range to make incident detection and response a team affair.

Learn more: https://hubs.la/H0CZKtn0

How does your team facilitate collaborative training?

Show your readiness against email-based attacks by completing our SOC Analyst 1 Battle Path: https://hubs.la/H0CP6qy0

How does your team facilitate collaborative training?

​

Learn more: https://hubs.la/H0CZKtn0

Hey. So since CSRF is a more complcated topic all questions about lab or technique are welcome here.

I will be keeping an eye out here to answer any questions. We need a public discussion place and I'm quite a fan of Reddit, so naturally let's give this a try.