iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (1)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
Pack of wargames
  • chroniccommand
    Posts: 1,389
    So I've been working on some wargames. So far I've made 6 simple ones. They don't really dive into vulnerabilities yet, but they deal with *nix commands and such. I think they're pretty good for a start. I've compressed them all into a tarball. 


    http://www.mediafire.com/?wi4c9rnyxjqnj5u

    So what do you all think? Took a while to develop 'em but they're basic ideas. If you guys like these, I'll start on the medium difficulty ones.

    EDIT:
    Updated the pack with wargames 7 - 9. 9 has semtex's idea with the webserver etc.

    http://www.megaupload.com/?d=NAP4MJJ7


    EDIT 2:
    Updated once again with wargames 10+11. 10 utilizes strings command, 11 requires either hex analyzing or reverse engineering.

    http://www.megaupload.com/?d=02Z9QE9Y


    EDIT 3:
    Added wargame 12. I'll just upload the compressed lvl12 tarball here. It's a bit more complex than the last ones, but still in the medium difficulty range. Everything is fully explained in the wargame12 file.

    http://www.megaupload.com/?d=VZ0L6TY0
  • Xin
    Posts: 3,251
    Looks good, how would we measure the success of these challenges, would they send us the answer or..?
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    Looks good, how would we measure the success of these challenges, would they send us the answer or..?



    Uh. Well I wasn't really thinking about that. I don't even think the war games should have a high score. Hacking is more learning, not competing for the highest score. I think we should have more of a tag page like STS where the user can add html code or something.
  • _st4ck3D*
    Posts: 83
    said:


    Hacking is more learning, not competing for the highest score.


    It isn't necessary I think to have a scoreboard. Just to give the chance to people to have this experience (going through completing the wargames gaining knowledge : )
  • Xin
    Posts: 3,251
    said:


    said:


    Looks good, how would we measure the success of these challenges, would they send us the answer or..?



    Uh. Well I wasn't really thinking about that. I don't even think the war games should have a high score. Hacking is more learning, not competing for the highest score. I think we should have more of a tag page like STS where the user can add html code or something.


    Okay cool, where are we gonna host it from as i dont wanna allow SSHing to iExploit's VPS and i cant afford another one atm, i suppose we could do a hamachi thing.
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    said:


    said:


    Looks good, how would we measure the success of these challenges, would they send us the answer or..?



    Uh. Well I wasn't really thinking about that. I don't even think the war games should have a high score. Hacking is more learning, not competing for the highest score. I think we should have more of a tag page like STS where the user can add html code or something.


    Okay cool, where are we gonna host it from as i dont wanna allow SSHing to iExploit's VPS and i cant afford another one atm, i suppose we could do a hamachi thing.

    Whatever you can pull off lol. Hamachi is good. We just need to have a regular *nix file system and the ability administrate the system. We need to host an openSSH server, so users can ssh to that level, such as
    level1@address
  • Xin
    Posts: 3,251
    Okay heres the plan, if we can get it set up on a Hamachi virtual box network and it seems stable and fun for a few weeks, then il purchase a new VPS dedicated for it :)
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    Okay heres the plan, if we can get it set up on a Hamachi virtual box network and it seems stable and fun for a few weeks, then il purchase a new VPS dedicated for it :)




    Alright sounds good. Of course we'll need to make it as secure as possible and set it all up before you purchase the VPS for it. I'll help secure it and set it up. I was thinking a CHROOT jail. Or we can create the users such as level1, level2, level3 etc, and restrict them.
  • Xin
    Posts: 3,251
    said:


    said:


    Okay heres the plan, if we can get it set up on a Hamachi virtual box network and it seems stable and fun for a few weeks, then il purchase a new VPS dedicated for it :)




    Alright sounds good. Of course we'll need to make it as secure as possible and set it all up before you purchase the VPS for it. I'll help secure it and set it up. I was thinking a CHROOT jail. Or we can create the users such as level1, level2, level3 etc, and restrict them.


    Yeah we want Secure as possible also i dont have a lot of experience setting up advanced SSH servers so can you help set one up?
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    said:


    said:


    Okay heres the plan, if we can get it set up on a Hamachi virtual box network and it seems stable and fun for a few weeks, then il purchase a new VPS dedicated for it :)




    Alright sounds good. Of course we'll need to make it as secure as possible and set it all up before you purchase the VPS for it. I'll help secure it and set it up. I was thinking a CHROOT jail. Or we can create the users such as level1, level2, level3 etc, and restrict them.


    Yeah we want Secure as possible also i dont have a lot of experience setting up advanced SSH servers so can you help set one up?

    Yea sure. Just get the box set up, give me the login details etc and I'll set some stuff up.
  • chroniccommand
    Posts: 1,389
    Updated. Read the post for update info.
  • Sh3llc0d3
    Posts: 1,910
    Very good job chronic, can't wait to see these go live!
  • chroniccommand
    Posts: 1,389
    said:


    Very good job chronic, can't wait to see these go live!



    Thanks. Been working hard on these. I've ran dry on some ideas though care to help think some up? I've done some with basic linux commands, and 2 with debugging/disassembling with GDB. I was thinking maybe more GDB action.
  • Xin
    Posts: 3,251
    said:


    said:


    Very good job chronic, can't wait to see these go live!



    Thanks. Been working hard on these. I've ran dry on some ideas though care to help think some up? I've done some with basic linux commands, and 2 with debugging/disassembling with GDB. I was thinking maybe more GDB action.


    Yeah GDB stuff will be good :)
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    said:


    said:


    Very good job chronic, can't wait to see these go live!



    Thanks. Been working hard on these. I've ran dry on some ideas though care to help think some up? I've done some with basic linux commands, and 2 with debugging/disassembling with GDB. I was thinking maybe more GDB action.


    Yeah GDB stuff will be good :)


    Alright I'll start thinking of ideas.
  • chroniccommand
    Posts: 1,389
    Updated once again with 10+11.
  • chroniccommand
    Posts: 1,389
    Added another update. Wargame 12. Check it out it a while for me to make it.
Add a Comment