GameOver – Web PenTest Learning Platform

// June 14th, 2012 // Atheneum, Projects

Name : Game Over
Category : Web Pentest Learning Platform
File Type : VM image/iso

Author : Jovin Lobo
Mentor : Murtuja Bharmal

Download URL : http://sourceforge.net/projects/null-gameover/files

Default Credentials : [username:root / password:gameover]

Description :
Project GameOver was started with the objective of training and educating newbies about the basics of web security and educate them about the common web attacks and help them understand how they work. It is collection of various vulnerable web applications, designed for the purpose of learning web penetration testing.

GameOver has been broken down into two sections.
Section 1 consists of special web applications that are designed especially to teach the basics of Web Security. This seciton will cover
XSS
CSRF
RFI & LFI
BruteForce Authentication
Directory/Path traversal
Command execution
SQL injection

Section 2 is a collection of dileberately insecure Web applications. This section provides a legal platform to test your skills and to try and exploit the vulnerabilities and sharpen your skills before you pentest live sites. We would advice newbies to try and exploit these web applications. These applications provide real life environments and will boost their confidence.

29 Responses to “GameOver – Web PenTest Learning Platform”

  1. mrwrong says:
    June 16, 2012 at 2:12 am

    hi :)
    i want to known what is the default username and passwd for game over.
    Thank you! :)

  2. Raj says:
    June 17, 2012 at 5:03 pm

    Hi,
    I think, this is a cool idea for newbies to learn.

  3. j0k3r says:
    June 22, 2012 at 4:44 am

    Hey mrWrong,
    Sorry for the late reply..
    The default credentials are [Username:root / Password:gameover]

  4. Adwiteeya Agrawal says:
    June 22, 2012 at 4:47 pm

    greatttttt idea man!

  5. goons_squad_security says:
    June 23, 2012 at 2:30 am

    the user and login details are:

    Login: root
    Password: gameover

  6. shahril says:
    June 29, 2012 at 5:09 am

    Hello, i have burn and boot it, after i login using username : root and password is : gameover, it’s just show command promp/terminal, if this is in GUI mode or terminal mode because when i type startx, its just show nothing, so, what to do now ? thank for advanced..

  7. Adwiteeya Agrawal says:
    July 2, 2012 at 1:58 pm

    DID anyone try this ?

  8. nobody says:
    July 24, 2012 at 5:53 am

    @shahril : Hey sharil please note that Gameover hosts the vulnerable Web Apps. So once you login, the IP address of GameOver will be displayed. Now to access it you will have to enter this IP on your client browser.

  9. L3MUR says:
    August 5, 2012 at 7:15 am

    I have the same issue shahril. I even put the ip addresses into chrome and got several errors stating it could not connect.

  10. Anshul Katta says:
    September 14, 2012 at 2:19 pm

    huh…what a crap method to host a webapp…:/

  11. Vulnerable OS and Applications for Pentest Exercise says:
    September 19, 2012 at 8:04 am

    [...] http://null.co.in/2012/06/14/gameover-web-pentest-learning-platform/ [...]

  12. wilson says:
    October 1, 2012 at 1:52 pm

    please i just got this game over DVD from a friend and i do not know how to extract it to ma vmware player…could someone help..thanks

  13. Target Haker says:
    October 11, 2012 at 11:56 am

    It’s an excellent vulnerable OS i have ever seen in my 5 years of Pentesting… God bless to the developer…. cheers… :)

  14. Target Haker says:
    October 13, 2012 at 1:04 pm

    Mr. Wilson- Kindly download vmware workstation 7 or 8 then create a new OS and add this ISO image to boot from… done…

  15. sigsegv0 says:
    October 24, 2012 at 6:48 pm

    I create a new VirtualBox OS,I run it and enter root/gameover.But when I run my browser(firefox) it just can’t connect.Either I connect to localhost or eth0 inet address.I always get “The connection has timed out The server at … is taking too long to respond.” Is there any way to check if everything is working good on the server?

  16. peter hacker says:
    October 25, 2012 at 11:22 pm

    Ok, i have installed the iso on my VMware, used the login credentials, it automatically gives me the ifconfig, what next? you said use type the IP address of the server unto the client’s browser. How do you do that? Who is the client or what is the client? because I really do not think my physical system works as the client….please explain more

  17. GameOver: Una distribución para iniciar en la Seguridad Web y Hacking « Hacking « xora.org says:
    November 1, 2012 at 12:09 am

    [...] Página web del proyecto: http://null.co.in/2012/06/14/gameover-web-pentest-learning-platform/ [...]

  18. paco says:
    November 1, 2012 at 9:31 pm

    Esta disponible en Español?

  19. 1nvalid says:
    November 17, 2012 at 4:06 am

    @Paco No, a partir de ahora.

  20. Sam says:
    November 29, 2012 at 9:09 pm

    Hi, When I try to open it with VM the Vm asks for the type of OS. So what OS is the game over…… Thanks

  21. nobody says:
    November 30, 2012 at 4:58 am

    Select the type of OS as Linux (version you can select the option ‘Ubuntu’ or ‘Debian’)

  22. Gaurav says:
    December 20, 2012 at 4:59 am

    Guys, can somebody please help? Not able to understand what to do after mounting it on Virtual Box? I put the ip that i got in Gameover into my host’s firefox but connection timed out.. Whats the issue?

  23. rootpt says:
    January 17, 2013 at 7:36 pm

    Open firefox, put the ip that gameover distro gives u then read.
    The ip usually begins 192.168.1.* (network)
    If u want u can download a little pdf with a litlle help!
    http://www.4shared.com/office/cO7X8Mq-/GameOver_Read_ME.html

    Enjoy :)
    rooter @ irc.ptnet.org
    #toolkit

  24. Pentest lab vulnerable servers-applications list » Eclectic Security says:
    January 24, 2013 at 7:58 am

    [...] http://null.co.in/2012/06/14/gameover-web-pentest-learning-platform/ [...]

  25. ulipo says:
    January 29, 2013 at 4:33 am

    Hi, for those who still can’t make it work. If you’re using it on a vmware machine, check the network option and choose replicate network and start the machine, use the mentioned credentials and the ip with the eth0 use it on the browser of the pc host and there you will see the GameOver screen.

    Salu2

  26. Ab0Rt_R3tRy_Fa1L says:
    February 13, 2013 at 6:46 pm

    GAME OVER ON ORICLE VIRTUALBOX INSTALLATION GUIDE

    1 Download GameOver from http://sourceforge.net/projects/null-gameover/files/GameOver.0.1.null.iso/download

    2 Open VirtualBox (or download and install it from https://www.virtualbox.org/wiki/Downloads.)

    3 in the VirtualBox Manager, click New

    4 HERES WHAT TO ENTER:
    Name: GameOver(Or whatever you want to call your new virtual machine)
    Type: Linux
    Version: Other Linux

    5 I personally set my memory size to 2048 MB, hit next

    6 Make sure create a virtual hard drive now is selected, hit create

    7 make sure VDI is selected hit next

    8 make sure dynamically allocated is selected, hit next

    9 set to 8 gb (Or more if you really want, although more is unnecessary) hit create

    10 on the left hand side of the VirtualBox Manager, click on your GameOver VirtualMachine, hit settings

    11 click on Network

    12 MAKE SURE YOUR ADAPTER SETTINGS ARE SET LIKE THIS:
    ADAPTER 1 Settings:
    Enable Network Adapter- Checked
    Attached to: (Select Host-only Adapter)
    Name: VirtualBox Host-Only Ethernet Adapter
    EXPAND ADVANCED TAB
    Promiscuous Mode: (Select Deny)
    Make sure cable connected is checked
    HIT OK!

    13 Select game over in the left hand side of the VirtualBox Manager, Hit Start (at the top of the VirtualBox Manager)

    14 On first start up of GameOver Virtual Machine, at select Start-up disk, click the little folder, and navigate to your downloaded

    GameOver iso, select it, and hit start.

    15 select Live

    16 let it boot

    17 at login prompt:
    login: root
    Password: gameover

    18 type in ifconfig then hit enter

    19 look for eth0, and copy the inet addr (should begin with 192.168.xx.xxx)

    20 open your internet browser, and in the address bar enter the inet addr.

    21 ENJOY!

  27. Jigar says:
    March 10, 2013 at 5:32 am

    Nice Module Collection !!!
    Where Is phpmyadmin !???
    you should add it

  28. Snicklex says:
    March 12, 2013 at 1:41 am

    I’m trying to run GameOver in VirtualBox, but when I do get this error:
    ‘Unknown keyword in configuration file’
    ‘No DEFAULT or UI configuration directive found!’

    I’ve tried using VMware Player as well, but still got the same error. Any thoughts?

  29. Amoussou says:
    March 20, 2013 at 7:02 pm

    Hi i have download the gameover and installed it , after i login using username : root and password is : gameover, it’s just show command promp/terminal, and when i type startx, its just show nothing, please i need help

Leave a Reply