Skip to content

CTF Writeups

bullybox (PG)

Bullybox -- Proving Grounds (write-up)¶

Difficulty: Easy Box: Bullybox (Proving Grounds) Author: dsec Date: 2025-06-24

TL;DR¶

Added hostname to /etc/hosts, then used discovered credentials to gain access.¶

Target info¶

Host: see nmap results

Enumeration¶

Initial scan

Added hostname to /etc/hosts, then ran nmap:

Nmap after hosts

Web enumeration

Exploitation¶

Access gained

Password: Playing-Unstylish7-Provided

Reference: https://medium.com/@diogo.g.c/pg-ctf-200-06-walkthrough-guide-f8c6f55c4588

Lessons & takeaways¶

Always add discovered hostnames to /etc/hosts
Check walkthrough references when stuck on short boxes