It looks like you're new here. If you want to get involved, click one of these buttons!
Planning thread for the 1st wargame, White vs Black is the name/theme.
Help me with the rules and stuff like that.
Format:
- Up to 5 Players Per team
- Hamachi network
- Two identical OS's running a range of vulnerable scripts they must exploit for points
Rules:
Xinapses Vulns
- Website with LFI vuln, leading to /etc/passwd to be read
- With this they can login to SSH with one of the users who has an empy/weak password
- He is then met with a stack based buffer overflow C file in which he can exploit to get root access/backconnect whatever his shellcode wants.
Chronics Vulns
Semtex's Vulns
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
int authcheck(char *password){
int auth = 0;
char pass_buff[25];
strcpy(pass_buff, password);
if(strcmp(pass_buff, \"iexploit1\") == 0)
{
auth = 1;
}
return auth;
}
int main(int argc, char *argv[]) {
if(argc < 2)
{
printf(\"Usage: %s <password>\n\", argv[0]);
return 0;
}
if(authcheck(argv[1]))
{
printf(\"Password accepted\n\");
}
else
{
printf(\"No access\n\");
}
}