An open API service indexing awesome lists of open source software.

https://github.com/artainmo/darkly

42 school project. Cybersecurity project where we need to hack a given website and explain.
https://github.com/artainmo/darkly

42school cybersecurity study web

Last synced: over 1 year ago
JSON representation

42 school project. Cybersecurity project where we need to hack a given website and explain.

Awesome Lists containing this project

README

          

# Darkly

In this project we need to hack a given website.

Each folder describes one vulnerability.

Flags refer to vulnerability identifiers in the form of a random code and proves a vulnerability has been found.

42 school [subject](https://cdn.intra.42.fr/pdf/pdf/60806/en.subject.pdf).

This project I initially made with [Aglorios](https://github.com/Aglorios17) in this [repository](https://github.com/Aglorios17/Darkly_19), I re-uploaded it on my profile.

## SETUP
To setup the webiste that has to be hacked follow the following steps:
1. Download 'Virtual Machine' and 'Darkly_i386.iso' (found [here](https://projects.intra.42.fr/projects/42cursus-darkly)).

2. Use VM to launch a virtual machine of type 'linux' and version 'Oracle 64bit'.

3. In settings of this virtual machine go to 'Network' set 'Attached to' to 'Bridged Adapter', in 'Advanced' set 'Promiscuous Mode' to 'Allow All'.

4. In settings of this virtual machine go to 'Storage' and as shown in image click on 'Empty' followed by the right disk and choose the downloaded disk file 'Darkly_i386.iso'.

![](/images/1.png)
(Always click on ok to save virtual machine settings changes.)

5. Launch virtual machine, wait, go to given link.

Possible issues:

* VM does not work on apple M1 chips.
* Launching the VM with iso file does not return correct link when on macOS Montery but it does function on Catalina at least.

## Documentation
https://www.codecademy.com/learn/introduction-to-cybersecurity

https://www.codecademy.com/learn/cybersecurity-for-business

https://www.codecademy.com/learn/defending-express-applications-from-sql-injection-xss-csrf-attacks

https://highon.coffee/blog/lfi-cheat-sheet