Skip to content

NINJA HACKER ACADEMY

NHA

  • NINJA HACKER ACADEMY (NHA) is written as a training challenge where GOAD was written as a lab with a maximum of vulns.
  • You should find your way in to get domain admin on the 2 domains (academy.ninja.lan and ninja.hack)

  • Starting point is on srv01 : 192.168.58.21

  • Flags are disposed on each machine, try to grab all. Be careful all the machines are up to date with defender enabled.

  • Some exploits needs to modify path so this lab is not very multi-players compliant (unless you do it as a team ;))

  • Obviously do not cheat by looking at the passwords and flags in the recipe files, the lab must start without user to full compromise.

  • Install :

./goad.sh -t install -l NHA -p virtualbox

or

./goad.sh
> set_lab NHA
> set_provider <your_provider>
> set_iprange 192.168.56  # select the one you want and you can skip this with ludus
> install
  • Once install finish disable vagrant user to avoid using it :
./goad.sh
> load <instance_id>
> disable_vagrant
  • Now do a reboot of all the machine to avoid unintended secrets stored : 
> stop
> start

And you are ready to play ! :)

  • If you need to re-enable vagrant
> load <instance_id>
> enable_vagrant
  • If you want to create a write up of the chall, no problem, have fun. Please ping me on X (@M4yFly) or Discord, i will be happy to read it :)

Tip

No bruteforce, if not in rockyou do not waste your time and your cpu/gpu cycle.