App - Script

These challenges will help you to understand scripting vulnerabilities related to weak environment or configuration and development mistakes in some languages.

You will have credentials for each challenge. The goal is to leverage your privileges by exploiting some environment vulnerabilities (incorrect permissions on files, weak encryption, ...) and some development mistakes. This will allow you to get a password in order to validate your skills on the platform.

Prerequisite :
- Knowledges in UNIX shell environment and programming languages like Python and Perl.
- Knowledges in binary files manipulation tools.
- Knowledges in C language.

Challenge Results Challenge Results

Pseudo Challenge Lang date
Im1on   SSH Agent Hijacking en 23 February 2019 at 14:54
Im1on   Python - pickle en 23 February 2019 at 14:32
william   Bash - cron en 23 February 2019 at 14:10
Radoy   Bash - System 1 en 23 February 2019 at 12:53
r00t4rd   Python - input() de 23 February 2019 at 12:49
sabbat   Bash - System 1 en 23 February 2019 at 12:48
isomorphisme   Perl - Command injection fr 23 February 2019 at 12:27
isomorphisme   Bash - System 2 fr 23 February 2019 at 12:21
isomorphisme   sudo - faiblesse de configuration fr 23 February 2019 at 12:13
posix   Python - input() en 23 February 2019 at 11:44