$ ssh codeXing@1.234.41.2 Password: … FreeBSD 8.2-RELEASE (GENERIC) #0: Fri Feb 18 02:24:46 UTC 2011 $ ls -l -rwsr-xr-x 1 codeXing2 codeXing2 5916 Feb 24 08:49 X -r——– 1 codeXing2 codeXing2 26 Feb 24 08:56 password Looks like a classic binary exploitation challenge right ? $ echo “ABCDEFGHIJKLOMNOPQRSTUVWXYZ” > test […]
Stage 13 Question: KimJongUnd We lost many time on this exploitation challenge for many reasons. The vulnerability is when you input the command line after the password, there is a buffer overflow and you can control EIP. Our buffer is on the stack so we spend some time finding a […]
In this challenge, we have connect to a service running on port 4004 : $ nc inmemory.final2012.ghostintheshellcode.com 4004 Written in memory of a great microprocessor. Waiting for program… Too slow! great microprocessor.. port 4004.. waiting for program… Could this be an Intel 4004 emulator ? Checking the documentation for the […]
In this challenge, we need to recover the key from the website of DONGPO-SA Capital. This website in running on Windows with Apache, PHP and MySQL.
In this challenge, you get a Windows binary, when you start it it only display a white windows
In this Networking challenge, we get a short tcpdump capture file with a SSH session.
In this challenge we get an Android .apk with a crackme application
In this challenge, we need to get administrator credential on someone’s site who loves cat, ajax and getting contact emails. A robot will visit any link you post in the contact form, this robot is at the same time logged in the site’s administrator account.
In this challenge, we get an archive with an encrypted file and an executable that was used to encrypt it. We have to decrypt this file to get the key.