The third boot2root system in the Breach series is an intermediate challenge. This time the VM will automatically acquire an IP address via DHCP. First, let’s identify the target system. With …
Tutorial
CTF walkthroughs, exploit exercises and a few how-tos.
April 2017
March 2017
Breach 2.1 is meant to be beginner to intermediate boot2root/CTF challenge. The VM is configured with a static IP address (192.168.110.151) so you will need to configure your host-only adaptor to this …
Breach 1.0 is meant to be beginner to intermediate boot2root/CTF challenge. The VM is configured with a static IP address (192.168.110.140) so you will need to configure your host-only adaptor to this …
November 2014
Exploit-Exercises: Protostar For this level we have got a binary listening on port 2995. Let’s find out what this binary is up to. 0x08049833 <main+0>: push %ebp 0x08049834 …
Exploit-Exercises: Protostar For this scenario we need to run the winner() function. To get a better idea about the binary a look at the assembly helps. 0x08048492 <main+6>: sub $0x20,%esp …
September 2014
Exploit-Exercises: Protostar For this exercise we have got a service listening on port 2999. Let’s connect and see what it does. user@protostar:/opt/protostar/bin$ telnet 127.0.0.1 2999 …
Exploit-Exercises: Protostar First of all, we take a look at the disassembly. ... 0x08048431 <main+6>: sub $0x10,%esp 0x08048434 <main+9>: mov 0xc(%ebp),%eax ; load pointer to the address …
August 2014
Exploit-Exercises: Protostar For this scenario we need to overwrite the stack variable $modified. To get a better idea about the binary a look at the assembly helps. 0x080483f4 <main+0>: push …
May 2014
Historical Content (2014): This article demonstrates classic stack-based buffer overflow exploitation on Windows XP SP3. Modern Windows systems include mitigations such as ASLR, DEP/NX, and CFG that …