Prerequisite Files
Microsoft Visual C++ RedistributableSome VMs (especially Windows-based) require the Microsoft Visual C++ Redistributable runtime to function properly.
Download the latest supported VC++ Redistributables
- Download and install the version matching your OS's architecture (most modern systems use x64).
- Double-click the downloaded file and follow the prompts to install.
- Restart your computer after installation.
VirtualBox
- Download VirtualBox from the official site.
-
Install VirtualBox:
- Windows: Run the .exe file and accept the default options. Approve any Windows driver warnings.
- macOS: Open the .dmg, double-click VirtualBox.pkg, follow the prompts, and allow security if needed under System Preferences > Security & Privacy.
- Linux (Ubuntu/Debian): In terminal, run:
sudo apt update && sudo apt install virtualbox -y
- Launch VirtualBox and confirm you see the VirtualBox Manager window.
Attacker Box Setup
-
Download a Kali Linux or Ubuntu-based .ova or .iso image.
Kali OVA: Kali VMs -
Import into VirtualBox:
- OVA: Double-click to open/import, or in VirtualBox: File > Import Appliance → select your OVA file.
- ISO: In VirtualBox, click New → follow prompts → for storage, attach ISO as virtual CD/DVD → install OS inside the VM as prompted.
-
Set the network adapter to Bridged:
- In VirtualBox Manager, select the VM → Settings > Network → Attached to: Bridged Adapter.
- Pick your active network interface (Wi-Fi/Ethernet) if needed.
-
Start the VM and log in:
- Default credentials for Kali: kali:kali
- Change password if prompted.
-
Update your OS:
- Open terminal, run: sudo apt update && sudo apt upgrade -y
Challenge Setup
- Download the learn/hack challenge .ova file.
-
Import into VirtualBox:
- Double-click the .ova, or use File > Import Appliance.
- Adjust RAM/CPU if necessary, but keep your system stable.
- Set the network adapter to Bridged (the same as the attacker box).
- Start the challenge VM. Default credentials may be provided with the challenge.
Finding Challenge
-
On the attacker VM, open a terminal and run:
ip a or ifconfig
Note your IP address (e.g., 192.168.1.101). - Determine your subnet (e.g., 192.168.1.0/24).
-
Scan the local network for hosts:
- nmap -sn 192.168.1.0/24 --exlude <your-ip-address> (e.g., 192.168.1.101)
- Look for the only other VirtualBox IP. (e.g., 192.168.1.11)
-
Run a port scan on the challenge IP to find services:
- nmap -A <challenge_ip> (e.g., 192.168.1.11)
- Access services as directed by the challenge (e.g., for a web challenge, open http://<challenge_ip>:80 in a browser).
PLUNDER
Once ye've conquered the challenge and seized the treasure.txt, submit its contents to claim your booty!
- Linux Challenges: The treasure file is usually found at /root/treasure.txt
- Windows Challenges: The treasure file is usually found at \Users\Administrator\Desktop\treasure.txt
cat /root/treasure.txt
or
type C:\Users\Administrator\Desktop\treasure.txt
Copy the entire contents of treasure.txt and submit it where instructed on the challenge.
Click to Play
Video Demonstration