App - System App - System

These challenges will help you understand applicative vulnerabilities.

Login credentials are provided for different challenge, the goal is to obtain additional rights by exploiting program’s weaknesses and get a password to validate challs on the portal.

Prerequisite:
– GDB.
– Knowledges in ASM.
– Knowledges in C language.

challenges 93 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution ↓↑ Date
pas_valide ELF ARM64 - Multithreading 1% 21 140 franb 0 13 February 2023
pas_valide ELF x64 - Advanced blind format string exploitation 1% 14 115 nobodyisnobody 0 11 July 2024
pas_valide ELF MIPS - URLEncoded Format String bug 1% 42 100 pickle 0 7 October 2018
pas_valide ELF x64 - Blind SROP 1% 27 100 s1m 0 28 December 2023
pas_valide LinKern ARM - vulnerable syscall 1% 182 85 pickle 0 22 March 2017
pas_valide PE32+ Basic ROP 1% 80 75 Ech0 0 6 December 2019
pas_valide ELF x64 - Heap Hop 1% 9 100 nobodyisnobody 0 11 July 2024
pas_valide ELF x64 - ret2dl_init 1% 62 70 kikko 0 27 May 2021
pas_valide ELF x64 - Buggy VM 1% 85 70 NonStandardModel 0 10 June 2022
pas_valide ELF x64 - File Structure Hacking 1% 119 65 nobodyisnobody 0 27 May 2021
pas_valide ELF x64 - Heap Filling 1% 124 60 voydstack 0 27 May 2021
pas_valide LinKern MIPSel - Vulnerable ioctl 1% 77 100 pickle 0 23 October 2018
pas_valide ELF x64 - Stack buffer overflow - Stack pivot 1% 146 40 spikeroot 0 11 July 2024
pas_valide LinKern ARM - Stack Overflow 1% 79 110 pickle 0 24 July 2017
pas_valide ELF ARM - Use After Free 1% 118 110 pickle 0 22 March 2017
pas_valide ELF x64 - Seccomp Whitelist 1% 100 120 pickle 0 3 June 2017
pas_valide ELF x86 - Blind ROP 1% 164 120 franb 0 9 October 2016
pas_valide WinKern x64 - Use After Free 1% 34 120 __syscall , Synacktiv 0 27 January 2020
pas_valide ELF ARM64 - Heap Underflow 1% 32 120 nobodyisnobody 0 13 February 2023
pas_valide ELF x64 - Browser exploit - BitString 1% 40 135 pickle 0 15 December 2018
pas_valide ELF x64 - Blind ROP 1% 125 135 franb 1 10 March 2018
pas_valide ELF x64 - Advanced Heap Exploitation - Heap Leakless & Fortified 1% 62 135 nobodyisnobody 1 27 May 2021
pas_valide ELF x64 - Basic heap overflow 1% 2068 10 sourcePerrier 1 13 February 2023
pas_valide ELF x64 - Remote heap buffer overflow - tcache 1% 324 80 franb 1 5 February 2017
pas_valide LinKern x86 - Null pointer dereference