App - Script

Exploit environment weaknesses, configuration mistakes and vulnerability patterns in shell scripting and system hardening.

For each of these challenges, you will be provided with connection credentials such as SSH access or a network socket. Depending on the challenge you will need to elevate your privileges or escape the sandbox by exploiting the provided environment.

Prerequisites:
- Some knowledge of the UNIX shell and of common UNIX privilege escalation techniques
- Advanced understanding of scripting languages such as Python, Perl, PHP in order to escape jails

 22 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution
pas_valide Bash - System 1 15% 29575 5 Lu33Y 10
pas_valide sudo - weak configuration 10% 19741 5 notfound404 4
pas_valide Bash - System 2 9% 17951 10 Lu33Y 10
pas_valide Powershell - Command Injection 1% 1483 10 hat.time 4
pas_valide Bash - unquoted expression injection 1% 781 15 sbrk 4
pas_valide Perl - Command injection 5% 9400 15 Tosh 9
pas_valide Powershell - SecureString 1% 791 15 hat.time 2
pas_valide Bash - cron 5% 8777 20 g0uZ 8
pas_valide Python - input() 6% 11997 20 g0uZ 11
pas_valide Bash - quoted expression injection 1% 161 25 sbrk 0
pas_valide Bash - race condition 1% 168 25 sbrk 6
pas_valide Powershell - Basic jail 1% 292 25 hat.time 6
pas_valide Python - pickle 2% 3910 25 koma 9
pas_valide Shared Objects hijacking 1% 337 30 das 2
pas_valide SSH - Agent Hijacking 1% 1489 30 mayfly 5
pas_valide Python - PyJail 1 3% 4917 35 sambecks 4
pas_valide PHP - Jail 1% 457 40 LordRoke 9
pas_valide Python - PyJail 2 2% 2755 40 zM_ 10
pas_valide Python - Jail - Exec 1% 1103 50 Arod 3
pas_valide Javascript - Jail 1% 286 55 waxous 2
pas_valide Python - Jail - Garbage collector 1% 352 55 n0d 4
pas_valide Bash - Restricted shells 1% 1772 70 Yorin 6

Challenge Results Challenge Results

Pseudo Challenge Lang date
must   Bash - System 2 21 January 2021 at 00:01
NDragonX06_1   Bash - System 1 21 January 2021 at 00:01
Alexandre Abou Chahine   sudo - weak configuration 20 January 2021 at 23:52
Einstein   Bash - System 1 20 January 2021 at 23:45
Lyne   Python - input() 20 January 2021 at 23:35
n0n0   Bash - quoted expression injection 20 January 2021 at 23:31
uallerhack   Powershell - SecureString 20 January 2021 at 23:24
Yorf   Python - PyJail 2 20 January 2021 at 23:22
must   sudo - faiblesse de configuration 20 January 2021 at 23:15
shadoli   Bash - Shells restreints 20 January 2021 at 22:55