Binary Exploitation [pwnable.kr] - (Level 6) random
#Challange Description
| Name | random |
| Points | 1 |
| Solves | 9870 times |
| Category | Exploitation |
| Description | Daddy, teach me how to use random value in programming! |
Binary Exploitation [pwnable.kr] - (Level 6) random
| Name | random |
| Points | 1 |
| Solves | 9870 times |
| Category | Exploitation |
| Description | Daddy, teach me how to use random value in programming! |
Binary Exploitation [pwnable.kr] - (Level 5) passcode
| Name | random |
| Points | 10 |
| Solves | 7513 times |
| Category | Exploitation |
| Description | Mommy told me to make a passcode based login system. My initial C code was compiled without any error! Well, there was some compiler warning, but who cares about that? |
Binary Exploitation [pwnable.kr] - (Level 4) flag
| Name | flag |
| Points | 7 |
| Solves | 10695 times |
| Category | Exploitation |
| Description | Papa brought me a packed present! let’s open it. This is reversing task. all you need is binary |
Binary Exploitation [pwnable.kr] - (Level 3) BOF
| Name | BOF |
| Points | 7 |
| Solves | 12586 times |
| Category | Exploitation |
| Description | Nana told me that buffer overflow is one of the most common software vulnerability. Is that true? |
Binary Exploitation [pwnable.kr] - (Level 2) Collision
| Name | BOF |
| Points | 7 |
| Solves | 12586 times |
| Category | Exploitation |
| Description | Daddy told me about cool MD5 hash collision today. I wanna do something like that too! |
Binary Exploitation [pwnable.kr] - (Level 1) FD
| Name | FD |
| Points | 7 |
| Solves | 12586 times |
| Category | Exploitation |
| Description | Mommy! what is a file descriptor in Linux? |
Linux Binary Exploitation Series (with pwnable.kr)
There’s no use talking about the problem unless you talk about the solution.
This is a kick-off post for the series of post on The War Game pwnable.kr. It’s focused on Linux Exploitation.
Testing Linux Heap exploits on different Glibc version (with source-level debugging setup)
Recently I am learning about Linux Heap exploitation and I came across some really good Phrack papers and blogs which explained different type of attacks in varying conditions, I have included the link of these blogs and papers in the next section. I also came across an amazing GitHub project How2Heap by shellpish team, this project has the example exploit code for various heap exploitation technique of different versions of Glibc out there in public, which help me to get a better understanding of how those attacks played out. That project also included a script to build Glibc with any version of your choice and test the exploit on that version.
Analyzing the Windows LNK file attack method
Recently a friend of mine shared an interesting Malicious sample, it was a Microsoft shortcut file (LNK file) which after clicking(execution) lead to infection, although I was not aware of this type of attack vector before doing a basic research on google I was surprised that there is an increase in this type of attacks since 2017. In this post we will Analysis the LNK file malware and uncover how attacker uses multiple layers of obfuscation to evade AV and finally dropping malicious binary, we will also look into how to de-obfuscate each layer and understand what the code is doing.
Unpacking Grey Energy malware (Service Application DLL)
Recently I stumbled upon malware sample which was part of Grey Energy malware campaign targeting Ukraine energy infrastructure. I ran the hash of the file on virutotal and many of the antiviruses tagged it Grey Energy and I tried to do a little more internet research but didn’t find and analysis on it. As there was no post on this sample so I decided to write one.
In the post you will learn the following:
File hash : 15a6f734ca79efc027000dd12f4d3870ccc9f604517b0e700c05b961659308d1
Update your browser to view this website correctly.&npsb;Update my browser now