App - Script

Exploit environment weaknesses, configuration mistakes and vulnerability patterns in shell scripting and system hardening.

For each of these challenges, you will be provided with connection credentials such as SSH access or a network socket. Depending on the challenge you will need to elevate your privileges or escape the sandbox by exploiting the provided environment.

Prerequisites:
- Some knowledge of the UNIX shell and of common UNIX privilege escalation techniques
- Advanced understanding of scripting languages such as Python, Perl, PHP in order to escape jails

 22 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution
pas_valide Bash - System 1 15% 27555 5 Lu33Y 10
pas_valide sudo - weak configuration 10% 18631 5 notfound404 4
pas_valide Bash - System 2 9% 16747 10 Lu33Y 10
pas_valide Powershell - Command Injection 1% 851 10 hat.time 3
pas_valide Perl - Command injection 5% 9012 15 Tosh 9
pas_valide Powershell - SecureString 1% 522 15 hat.time 2
pas_valide Bash - cron 5% 8460 20 g0uZ 8
pas_valide Python - input() 6% 11440 20 g0uZ 11
pas_valide Powershell - Basic jail 1% 158 25 hat.time 5
pas_valide Python - pickle 2% 3786 25 koma 9
pas_valide Shared Objects hijacking 1% 293 30 das 2
pas_valide SSH - Agent Hijacking 1% 1418 30 mayfly 5
pas_valide Python - PyJail 1 3% 4716 35 sambecks 3
pas_valide Bash considered harmful 1% 104 40 sbrk 5
pas_valide Bash/Awk - netstat parsing 1% 355 40 sbrk 3
pas_valide PHP - Jail 1% 428 40 LordRoke 9
pas_valide Python - PyJail 2 2% 2607 40 zM_ 10
pas_valide Python - Jail - Exec 1% 1069 50 Arod 2
pas_valide System Disaster 1% 55 50 sbrk 0
pas_valide Javascript - Jail 1% 272 55 waxous 2
pas_valide Python - Jail - Garbage collector 1% 340 55 n0d 4
pas_valide Bash - Restricted shells 1% 1666 70 Yorin 6

Challenge Results Challenge Results

Pseudo Challenge Lang date
Sakatiamy   Python - input() 29 September 2020 at 20:34
Fable   sudo - faiblesse de configuration 29 September 2020 at 20:27
MHeez   sudo - weak configuration 29 September 2020 at 19:57
AnthonyDUSART   Perl - Command injection 29 September 2020 at 19:55
SoEasY   Powershell - Basic jail 29 September 2020 at 19:46
Sakatiamy   Bash - cron 29 September 2020 at 19:45
Romsnack   Bash - System 1 29 September 2020 at 19:26
Anythings   Python - PyJail 1 29 September 2020 at 19:25
Nikj   Python - pickle 29 September 2020 at 19:21
Theo   Bash - System 1 29 September 2020 at 19:03