App - Script

Exploit environment weaknesses, configuration mistakes and vulnerability patterns in shell scripting and system hardening.

For each of these challenges, you will be provided with connection credentials such as SSH access or a network socket. Depending on the challenge you will need to elevate your privileges or escape the sandbox by exploiting the provided environment.

Prerequisites:
Some knowledge of the UNIX shell and of common UNIX privilege escalation techniques
Advanced understanding of scripting languages such as Python, Perl, PHP in order to escape jails

18 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note	Solution
	Bash - System 1	15% 25046	5		Lu33Y		10
	sudo - weak configuration	10% 16957	5		notfound404		4
	Bash - System 2	9% 15356	10		Lu33Y		10
	Perl - Command injection	5% 8229	15		Tosh		9
	Bash - cron	5% 7805	20		g0uZ		8
	Python - input()	6% 10419	20		g0uZ		11
	Python - pickle	2% 3423	25		koma		8
	Shared Objects hijacking	1% 102	30		das		0
	SSH - Agent Hijacking	1% 1236	30		mayfly		5
	Python - PyJail 1	3% 4328	35		sambecks		3
	Bash/Awk - netstat parsing	1% 315	40		sbrk		3
	PHP - Jail	1% 359	40		LordRoke		9
	Python - PyJail 2	2% 2365	40		zM		9
	Python - Jail - Exec	1% 982	50		Arod		2
	System Disaster	1% 19	50		sbrk		0
	Javascript - Jail	1% 253	55		waxous		2
	Python - Jail - Garbage collector	1% 304	55		n0d		3
	Bash - Restricted shells	1% 1499	70		Yorin		4

Challenge Results

Pseudo	Challenge	Lang	date
zenza	Bash - System 2		29 March 2020 at 18:16
JoshuaSign	Shared Objects hijacking		29 March 2020 at 18:05
rexkrouger27	Bash - System 1		29 March 2020 at 17:56
marckll	Perl - Command injection		29 March 2020 at 17:25
dpcprince	Bash - System 2		29 March 2020 at 17:23
axelg99	Python - pickle		29 March 2020 at 17:20
dpcprince	Bash - System 1		29 March 2020 at 17:11
moodii	Bash - System 2		29 March 2020 at 17:04
marckll	Bash - System 2		29 March 2020 at 17:01
Zehef	sudo - faiblesse de configuration		29 March 2020 at 16:48