App - System App - System

These challenges will help you understand applicative vulnerabilities.

Login credentials are provided for different challenge, the goal is to obtain additional rights by exploiting program’s weaknesses and get a password to validate challs on the portal.

Prerequisite:
– GDB.
– Knowledges in ASM.
– Knowledges in C language.

challenges 93 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution ↓↑ Date
pas_valide ELF ARM64 - Multithreading 1% 21 140 franb 0 13 February 2023
pas_valide ELF x64 - Advanced blind format string exploitation 1% 5 115 nobodyisnobody 0 11 July 2024
pas_valide ELF MIPS - URLEncoded Format String bug 1% 42 100 pickle 0 7 October 2018
pas_valide ELF x64 - Blind SROP 1% 17 100 s1m 0 28 December 2023
pas_valide LinKern ARM - vulnerable syscall 1% 170 85 pickle 0 22 March 2017
pas_valide PE32+ Basic ROP 1% 76 75 Ech0 0 6 December 2019
pas_valide ELF x64 - Heap Hop 1% 5 100 nobodyisnobody 0 11 July 2024
pas_valide ELF x64 - ret2dl_init 1% 53 70 kikko 0 27 May 2021
pas_valide ELF x64 - Buggy VM 1% 78 70 NonStandardModel 0 10 June 2022
pas_valide ELF x64 - File Structure Hacking 1% 110 65 nobodyisnobody 0 27 May 2021
pas_valide ELF x64 - Heap Filling 1% 113 60 voydstack 0 27 May 2021
pas_valide LinKern MIPSel - Vulnerable ioctl 1% 73 100 pickle 0 23 October 2018
pas_valide ELF x64 - Stack buffer overflow - Stack pivot 1% 85 40 spikeroot 0 11 July 2024
pas_valide LinKern ARM - Stack Overflow 1% 72 110 pickle 0 24 July 2017
pas_valide ELF ARM - Use After Free 1% 114 110 pickle 0 22 March 2017
pas_valide ELF x64 - Seccomp Whitelist 1% 93 120 pickle 0 3 June 2017
pas_valide ELF x86 - Blind ROP 1% 157 120 franb 0 9 October 2016
pas_valide WinKern x64 - Use After Free 1% 32 120 __syscall , Synacktiv 0 27 January 2020
pas_valide ELF ARM64 - Heap Underflow 1% 25 120 nobodyisnobody 0 13 February 2023
pas_valide ELF x64 - Browser exploit - BitString 1% 40 135 pickle 0 15 December 2018
pas_valide ELF x64 - Blind ROP 1% 119 135 franb 1 10 March 2018
pas_valide ELF x64 - Advanced Heap Exploitation - Heap Leakless & Fortified 1% 57 135 nobodyisnobody 1 27 May 2021
pas_valide ELF x64 - Basic heap overflow 1% 1695 10 sourcePerrier 1 13 February 2023
pas_valide ELF x64 - Remote heap buffer overflow - tcache 1% 314 80