Collaborate Disseminate
I’m trying to develop a simple buffer overflow CTF challenge inspired by the "Csaw 2016 Quals Warmup" challenge, here. I’ve managed to replicate the source code:
#include <stdio.h>
#include <stdlib.h>
int easy(){
s… Continue reading Simple Buffer Overflow (Function Call) Problem
I’m stuck on a CTF exercise that has been quite difficult to get a grasp of. I have access to a server as a user. On this server, there’s only root other than me. I am supposed to access a file in root where I have no permissions or read t… Continue reading CTF assistance on linux privilege escape [closed]
What is the best way to get more information from the information-gathering stages/ reconnaissance when trying CTFs? Is there any workflow for a new cybersecurity student who knows some programming?
for example consider against virtual mac… Continue reading CTF or Bug Bounty info gathering workflows [closed]
I’m working on a CTF challenge that involves exploiting a double-free vulnerability to modify the value of a specific global variable, PASSWORD, in a C program. The program allows for custom memory allocation and deallocation within a pred… Continue reading How to Exploit Double-Free Vulnerability to Overwrite a Specific Variable in C?
I have found the padding payload to gain a buffer overflow. Now I need to execute the shellcode. I’m looking for a jmp rsp gadget but I haven’t found it. Can I directly put the rsp address manually or should I combine other gadgets (ASLR d… Continue reading No jmp rsp gadget in buffer overflow
I am doing CTF ‘Skynet’ from THM and came across this problem.
Enumerating SMB, I gathered credentials ‘milesdyson’ and a list of passwords ‘log1.txt’.
I figured that I could try to brute force squirrelMail login form using Hydra. This is … Continue reading Hydra says different passwords with are correct each run, but only one works
In this challenge, An unauthorized admin panel available to give you the FLAG.
Application URL: https://ctf2-804e8.web.app/
FLAG Format : FLAG{Dyygsys653TwfctwE}
I’m doing a CTF challenge and would appreciate some help. The summary for the challenge:
Employees were obligated to back up their data. The backup occurred at
the end of each day to a shared area located in /var/backups.
Since you could … Continue reading Finding a vulnerability that can compromise the admin account for CTF [closed]
In a CTF, I want to attack a Bluekeep vulnerable machine over the internet using metasploit, but the problem is my Kali machine (attacker) is not exposed to the internet, so the vulnerable machine cannot send me back a reverse shell.
So I … Continue reading Pivoting over internet [closed]
I have been set on a mission by a friend to try and find a way to decrypt any/all of these strings:
4,2,c19db5de982f4595ae761bd9d998ce89,CHWK,19cd5ac9,19d6438f,1df,0,RvNWdl15V8MQv14/SgGwcpy1KIY=
4,2,3814b2e789a24b4f8135eff81a730a85,CHWK,1… Continue reading What’d be the best way to find out how to decrypt/un-encode parts of ciphertext? [closed]