BitFriends's bit

Author:
BitFriends

Language:
C/C++

Upload:
2020-05-27 12:53

Download

Platform:
Unix/linux etc.

Difficulty:
3.0

Quality:
4.0

Arch:
x86-64

Downloads:
10

Size:
14.01 KB

Writeups:
0

Comments:
4

Description

Welcome to another crackme. You have to get a shell. Note that patching is not allowed. You have to have aslr on. Otherwise it is not a valid solution. Turn it on with "sudo echo 2 /proc/sys/kernel/randomize_va_space". Good luck!

Comments (4)
Writeups (0)

You must be logged in to post a comment

Cr4ckC0ca1n3 on 2020-08-21 16:47: SPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTION Do NOT read this if you do not want the challenge to be spoiled!!!! why does this not work? (python2) import struct padding = "g/bin/sh\x00QEZz0YPYGti4vBCKQ45XiBJycuSFfXDryxwoH04XteKs6gCSIsmJoQgD3OGiAUj" #"gQ3vlXjt1QEZz0YPYGti4vBCKQ45XiBJycuSFfXDryxwoH04XteKs6gCSIsmJoQgD3OGiAUj" eip = struct.pack("L", 0x7ffff7a33440) nops = "\x90"*100 payload = "\xcc\xcc\xcc\xcc" print(padding + eip + nops + payload) igonre the payload and the comment. Do NOT read this if you do not want the challenge to be spoiled!!!! SPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTION

BitFriends on 2020-09-29 18:14: Firstly, aslr is on, which you have to defeat somehow. Secondly, NX is also on, which means no shellcode can be executed.

BitFriends on 2020-09-29 18:14: On the stack at least

loop on 2020-11-07 11:21: SPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTIONSPOILERALERTPARTIALSOLUTION does it also need slicing buffer when receving

You must be logged in to submit a writeup

crackmes.one

crackmes.one

BitFriends's bit