App - System App - System

These challenges will help you understand applicative vulnerabilities.

Login credentials are provided for different challenge, the goal is to obtain additional rights by exploiting program’s weaknesses and get a password to validate challs on the portal.

Prerequisite:
– GDB.
– Knowledges in ASM.
– Knowledges in C language.

challenges 93 Challenges

Results Name Validations ↓↑ Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution Date
pas_valide ELF x64 - Heap Hop 1% 9 100 nobodyisnobody 0 11 July 2024
pas_valide ELF x64 - Advanced blind format string exploitation 1% 14 115 nobodyisnobody 0 11 July 2024
pas_valide ELF ARM64 - Multithreading 1% 22 140 franb 0 13 February 2023
pas_valide ELF x64 - Blind SROP 1% 29 100 s1m 0 28 December 2023
pas_valide ELF ARM64 - Heap Underflow 1% 33 120 nobodyisnobody 0 13 February 2023
pas_valide ELF x64 - Syscall chaining 1% 34 95 Njörd 1 11 July 2024
pas_valide WinKern x64 - Use After Free 1% 34 120 __syscall , Synacktiv 0 27 January 2020
pas_valide ELF x64 - Browser exploit - BitString 1% 40 135 pickle 0 15 December 2018
pas_valide ELF MIPS - URLEncoded Format String bug 1% 44 100 pickle 0 7 October 2018
pas_valide WinKern x64 - Advanced stack buffer overflow - ROP 1% 48 120 __syscall , Synacktiv 1 27 January 2020
pas_valide ELF ARM - Heap buffer overflow - Wilderness 1% 48 120 pickle 1 25 March 2017
pas_valide ELF ARM - Alphanumeric shellcode 1% 54 100 pickle 2 16 March 2017
pas_valide ELF x64 - Advanced Heap Exploitation - Heap Leakless & Fortified 1% 62 135 nobodyisnobody 1 27 May 2021
pas_valide ELF x64 - ret2dl_init 1% 64 70 kikko 0 27 May 2021
pas_valide ELF ARM - Heap Overflow 1% 65 120 pickle 1 2 April 2017
pas_valide ELF x64 - FILE structure hijacking 1% 74 110 voydstack 3 27 May 2021
pas_valide LinKern MIPSel - Vulnerable ioctl 1% 77 100 pickle 0 23 October 2018
pas_valide ELF ARM - Heap Off-by-One 1% 79 115 pickle 1 11 March 2017
pas_valide PE32+ Basic ROP 1% 80 75 Ech0 0 6 December 2019
pas_valide LinKern ARM - Stack Overflow 1% 80 110 pickle 0 24 July 2017
pas_valide ELF x64 - Buggy VM 1% 89 70 NonStandardModel 0 10 June 2022
pas_valide ELF RISC-V - Intro - let’s do the ROP 1% 93 40 nobodyisnobody 1 13 February 2023
pas_valide ELF ARM - Heap format string bug 1% 97 105 franb 1 3 June 2017
pas_valide ELF MIPS - Format String Glitch 1% 98 60 pickle , martin