boot2root security ctf
Welcome to Exegol
A capture-the-flag built around common web vulnerabilities.
40+ flags in 4 categories, no prior CTF experience required.
Find the flag, submit it, climb the scoreboard.
register a team
Register on the intranet. The credential will be sent on your student email account. Every submission counts toward your team's score.
pick a challenge
Browse by category: injection, cracking, fuzzing, and more! Choose your level of challenge from easy to insane!
Categories are broad: cracking can mean password cracking or bruteforce, injection can be XSS, Python, SQL... Think of the category as a hint in the right direction.
submit the flag
Flags look like EPI{...}. Don't bruteforce flags, you'll know when you'll find them, mostly in /home/$USER and /root.
exegol
Exegol is a fantastic toolkit, a dockerized OS with all the tool needed for cybersecurity.
It works on every OS (Linux, Windows, Mac) and have everything you need and even more!
While not mandatory, it is highly encouraged to use it for the CTF.
Installation instructions are on https://exegol.com/install
rules
- No attacking the CTFd platform itself, only the challenge targets.
- Don't share flags or write-ups with other teams before, during or after the event.
- Have fun, checkup tools like
Burpsuite, ffuf, hydra, john, etc... (ALL are in Exegol)