The challenges consist of varying vulnerabilities and anti-debugger tricks in binaries, such as:

• Stack-based Buffer Overflows
• Format String Vulnerabilities
• Heap-based Buffer Overflows
• Detection of tracing
• Insecure validation of credentials
• and more… don’t want to give you all the good details eh?

SSH access :

• User: n00b
• Password: n00b

Note: ASLR must be disabled, log in as level17:madpwnage, and run “echo 0 > /proc/sys/kernel/randomize_va_space”. Also, challenge 3, is only a DoS challenge. This is the beta, so there are still glitches.

Full description : https://www.vulnhub.com/entry/the-pentesters-64-bit-appsec-primer-beta,155/