EH-30: Final Boss Lab - Ujian Akhir Ethical Hacking

Tools: Semua tools
Format: Capture The Flag (CTF) - 7 flag

Skenario

Target: Sebuah aplikasi e-commerce fiktif yang memiliki 7 celah keamanan. Tugas Anda: temukan dan eksploitasi semua celah untuk mendapatkan flag.

Attack Chain

🔍 Passive Recon
 ↓
🌐 Subdomain Discovery
 ↓
🔑 Authentication Bypass
 ↓
🔗 IDOR
 ↓
🔓 Sensitive Data Exposure
 ↓
🚀 Privilege Escalation
 ↓
📤 File Upload Bypass
 ↓
⌨️ Command Injection
 ↓
👑 Admin Compromise = WIN!

echo "=== FINAL BOSS: EH-030 ==*"
echo ""

echo "FLAG 1: Reconnaissance"
echo "  Soal: Temukan subdomain admin dari target"  
echo "  Petunjuk: Cek Certificate Transparency"
echo "  curl -s 'https://crt.sh/?q=%25.target.com' | grep admin"
echo "  FLAG{...}"
echo ""

echo "FLAG 2: Authentication Bypass"
echo "  Soal: Bypass login admin panel"
echo "  curl 'http://admin.target.com/login?user=admin' OR '1'='1&pass=x'"
echo "  FLAG{...}"
echo ""

echo "FLAG 3: IDOR"
echo "  Soal: Akses profile user dengan ID berbeda"
echo "  curl http://admin.target.com/api/user/1337"
echo "  FLAG{...}"
echo ""

echo "FLAG 4: Sensitive Data"
echo "  Soal: Temukan password yang bocor di response"
echo "  curl http://admin.target.com/api/users | jq '.[].password'"
echo "  FLAG{...}"
echo ""

echo "FLAG 5: Privilege Escalation"
echo "  Soal: Upgrade role dari user ke admin"
echo "  FLAG{...}"
echo ""

echo "FLAG 6: File Upload RCE"
echo "  Soal: Upload shell dan eksekusi perintah"
echo "  FLAG{...}"
echo ""

echo "FLAG 7: FULL COMPROMISE"
echo "  Soal: Baca flag dari /root/flag.txt"
echo "  FLAG{...}"
echo ""

echo "=== 🎉 SELAMAT! ==*"
echo "Anda telah menyelesaikan Ethical Hacking Labs Indonesia v1.0!"
echo "30 lab - 6 level - dari HTTP fundamentals sampai Final Boss."

Scoring

Flag	Vuln Type	Points
1	Recon	10
2	SQL Injection	20
3	IDOR	15
4	Data Exposure	10
5	Privilege Escalation	20
6	File Upload + RCE	25
7	Full Chain	50
Total		150

SELESAI! Ethical Hacking Labs Indonesia v1.0

Level	Lab	Dari	Ke
🟢 1 - Fundamental	1 - 5	HTTP	Session Management
🟢 2 - Beginner	6 - 10	SQLi	Path Traversal
🟡 3 - Intermediate	11 - 15	File Upload	CSRF
🟠 4 - Advanced	16 - 20	JWT	API Auth Bypass
🔴 5 - Modern	21 - 25	GraphQL	Data Exposure
🎯 6 - Simulation	26 - 30	Recon	Final Boss

Generated by @farishhz Agent Pentest Pipeline - TDCTF Security Academy