App - Script

These challenges will help you to understand scripting vulnerabilities related to weak environment or configuration and development mistakes in some languages.

You will have credentials for each challenge. The goal is to leverage your privileges by exploiting some environment vulnerabilities (incorrect permissions on files, weak encryption, ...) and some development mistakes. This will allow you to get a password in order to validate your skills on the platform.

Prerequisite :
- Knowledges in UNIX shell environment and programming languages like Python and Perl.
- Knowledges in binary files manipulation tools.
- Knowledges in C language.

Challenge Results Challenge Results

Pseudo Challenge Lang date
qparis   Python - PyJail 2 fr 22 February 2019 at 22:24
ldoin   Bash - System 1 en 22 February 2019 at 22:18
skar   Bash - System 2 fr 22 February 2019 at 22:12
T3K4   SSH Agent Hijacking fr 22 February 2019 at 22:02
sigustin   Bash - System 1 fr 22 February 2019 at 22:01
mikinosuke   SSH Agent Hijacking fr 22 February 2019 at 21:46
Lugurbal_Dev   Bash - System 2 fr 22 February 2019 at 21:41
Lugurbal_Dev   sudo - faiblesse de configuration fr 22 February 2019 at 21:32
william   Perl - Command injection en 22 February 2019 at 21:30
mainsindread   Python - pickle fr 22 February 2019 at 21:24