App - Script

Exploit environment weaknesses, configuration mistakes and vulnerability patterns in shell scripting and system hardening.

For each of these challenges, you will be provided with connection credentials such as SSH access or a network socket. Depending on the challenge you will need to elevate your privileges or escape the sandbox by exploiting the provided environment.

Prerequisites:
- Some knowledge of the UNIX shell and of common UNIX privilege escalation techniques
- Advanced understanding of scripting languages such as Python, Perl, PHP in order to escape jails

 22 Challenges

Results Name ↓↑ Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution
pas_valide Bash - Restricted shells 1% 1685 70 Yorin 6
pas_valide Bash - System 1 15% 28094 5 Lu33Y 10
pas_valide Bash - System 2 9% 17059 10 Lu33Y 10
pas_valide Bash - cron 5% 8574 20 g0uZ 8
pas_valide Bash - quoted expression injection 1% 22 25 sbrk 0
pas_valide Bash - race condition 1% 130 25 sbrk 5
pas_valide Bash - unquoted expression injection 1% 100 15 sbrk 0
pas_valide Javascript - Jail 1% 278 55 waxous 2
pas_valide PHP - Jail 1% 437 40 LordRoke 9
pas_valide Perl - Command injection 5% 9167 15 Tosh 9
pas_valide Powershell - Basic jail 1% 237 25 hat.time 5
pas_valide Powershell - Command Injection 1% 1071 10 hat.time 3
pas_valide Powershell - SecureString 1% 603 15 hat.time 2
pas_valide Python - Jail - Exec 1% 1074 50 Arod 2
pas_valide Python - Jail - Garbage collector 1% 346 55 n0d 4
pas_valide Python - PyJail 1 3% 4767 35 sambecks 3
pas_valide Python - PyJail 2 2% 2642 40 zM_ 10
pas_valide Python - input() 6% 11601 20 g0uZ 11
pas_valide Python - pickle 2% 3827 25 koma 9
pas_valide SSH - Agent Hijacking 1% 1438 30 mayfly 5
pas_valide Shared Objects hijacking 1% 309 30 das 2
pas_valide sudo - weak configuration 10% 18970 5 notfound404 4

Challenge Results Challenge Results

Pseudo Challenge Lang date
Magnum3016   Bash - System 1 27 October 2020 at 23:34
Gondowt   Bash - unquoted expression injection 27 October 2020 at 23:29
varmotte   sudo - faiblesse de configuration 27 October 2020 at 23:28
anou   Bash - System 2 27 October 2020 at 23:15
kikko   Bash - quoted expression injection 27 October 2020 at 23:06
Pr0Hack3r   Python - input() 27 October 2020 at 22:55
R1CTU5   Bash - System 2 27 October 2020 at 22:54
psmak   Bash - quoted expression injection 27 October 2020 at 22:48
R1CTU5   Bash - System 1 27 October 2020 at 22:44
0x835   Bash - unquoted expression injection 27 October 2020 at 22:40