From 18d7cb188280140e4d68a7eab739b39aee37ec46 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Simon=20Bu=C3=9Fmann?= Date: Fri, 1 Mar 2024 18:23:37 +0100 Subject: [PATCH] started cscg24 --- cscg24/pwn/intro-pwn-1/Dockerfile | 7 +++ cscg24/pwn/intro-pwn-1/flag | 1 + cscg24/pwn/intro-pwn-1/pwn1 | Bin 0 -> 13120 bytes cscg24/pwn/intro-pwn-1/pwn1.c | 70 ++++++++++++++++++++++++++++++ cscg24/pwn/intro-pwn-1/ynetd | Bin 0 -> 18744 bytes 5 files changed, 78 insertions(+) create mode 100644 cscg24/pwn/intro-pwn-1/Dockerfile create mode 100644 cscg24/pwn/intro-pwn-1/flag create mode 100755 cscg24/pwn/intro-pwn-1/pwn1 create mode 100644 cscg24/pwn/intro-pwn-1/pwn1.c create mode 100755 cscg24/pwn/intro-pwn-1/ynetd diff --git a/cscg24/pwn/intro-pwn-1/Dockerfile b/cscg24/pwn/intro-pwn-1/Dockerfile new file mode 100644 index 0000000..76a8896 --- /dev/null +++ b/cscg24/pwn/intro-pwn-1/Dockerfile @@ -0,0 +1,7 @@ +# docker build -t pwn1 . && docker run -p 1024:1024 --rm -it pwn1 + +FROM ubuntu:22.04 +COPY pwn1 flag ynetd . + +EXPOSE 1024 +CMD ./ynetd ./pwn1 diff --git a/cscg24/pwn/intro-pwn-1/flag b/cscg24/pwn/intro-pwn-1/flag new file mode 100644 index 0000000..b9414bc --- /dev/null +++ b/cscg24/pwn/intro-pwn-1/flag @@ -0,0 +1 @@ +CSCG{THIS_IS_TEST_FLAG} \ No newline at end of file diff --git a/cscg24/pwn/intro-pwn-1/pwn1 b/cscg24/pwn/intro-pwn-1/pwn1 new file mode 100755 index 0000000000000000000000000000000000000000..4b824c7042945dd216c3dd6a9115fbf1e5a84d89 GIT binary patch literal 13120 zcmeHOdvH|M89$pP5P2*C6;QBTd`v;hCPBe~QnPt+V*?@&El9ZDWN(s{ePnj;LgG{# z8)4Xy*vyo1m|9!f+D@HLXXs-rI!;A#@YT*}r>%^SDWz2t#c33!h`{#uoqN8`y*HcM z>G)rB;O=+6-}gA@eD~aQ?|I~#4b6=ufq>u?6kip@RhBtO4GX@)86j#!wYUJkmx*~| zBH#(QYLwVdPb=3Y&w){blemUNOBGg(bWV3rrb1{EAUmpS_hpg= z)ntb0K2?vSin1NCWVc({?N)Y7hgHRxa{H)lbZt=n{Ini2N=!+Y(%QG}DCH}sNp=*C zJFsBNcDKTg>iOTMa;3OVl{Z#gcB}d`Rm~L@@mTA!>nh^W#qn4&+r7BEdfDP-*M&2w z@DkZ>@=v;})@+m|(f#JoQk^ftMHtENc(&!EhL@Y)dTsA#pJv}F|M2m|pY9?V-AcZ1 zBA|)hKzRvaT=zwn?U~oU(JWv7(F5E~AoZqQU^Oo!xy$i8vj{$W47_d(eBl`Q$}#ZH zF>rGXoZ4Efo<9Pv;qs>`0E+2v8Uz0&a1EC~-3)+Y=N85dny%G=RcQW#cu%obhgSki7MD3!H|Sn0Gd<7PS` zGCdjFN(jSf>o$${7|dgLTOwoG+gr0_k#0+LK}rP~8QVt!Z4+WRBxm2`QysA3m%U%6#!;{^)#7+R<1*<#9UZ!Y45ZI_SbDyYOKb zu7)BhJ?+9nE`9C~G&ZXtSW3A+5YBBU0rv;OXAq#$fbvgur1){#=fY`h;I!X`^H@l- zpSf`N`{IBLcaN6`T{zzZ@^i?At6M^_c)^9!Gso!_7e19iP`&R&nf^d&c8(_Wormm_ z{409jb7hA`e(9Onn#f;u7QfTy*C0oHCs__1%OhR&5%F{@hhCBVd&E;{h7L*oIPnyc zp#zeCop=hx(0YY`uTl-%%yKf8~CV{KdQAm~FUn2maW=?_8m<)`)B z+x8_0#b#m=ifJwRW9{MT^Y54bTMkncMtHc4kz)VSR_SKZdD!dEoDb@`Vf~rGoAkgD z{nhjK95`H{98M*NWBKb{c`MXJwnFb)`L9{XZKV24)gM@S2HfB@G3kC zhh+hMC(3j8ob9{kY$!Vyu_#3$2dRv~Ae5e#xfjnt{Y6K;f9Vla?P+>42WODRjg)(r zG?c^sl^>!r4L%A8{;J?_aG#TJqWm5wpQHSM%j~`rG@QU<2T9tc)=q)4&{(HJzj7?U zL*5&md@Jd$aPsdH9xh@>a;|=%lt!`?MYNk;SpQP`YNTk-0=n~1HiY^uAEtY)Sy&D7S%d+bgN zujz1DgGAPj%G>)z6owk_6BVtoWJRV^G$iqk)_PLew6-HgElrvUYlW{mdbYhiZgt^z zfvk>ZjaVhjj#!(P>9XSS6{4Y=XbfKx*^IbXTboYVR!3@qSX@=9txe&pBO^oT@<&Yz z%njZ^-`+H~uRY^*k73Yb;KgV8{BDrRxb3Gww}H+=hy zbD#%71v=hQ&@NETxy|xB84?k=dz}b$mj~ufom4gum{d;R&-BgJg|e?91(gV=R7VzRe?VFUaR1wi6Kh6>fRf@lS2O5poT3i{!PT@^6>ahUPpNYzS%n z6KX>X_mt|P%3TxnP<7v=)uEbns5%m=jD!}}hBW9wzcy4Rzj5w|A02+wEhKN_X*>es z5g3oacm&2HFdl*N2#iNyJObkp7>~es1pZGW!0Y?Go{uS`OiX$0Sgy=M!fWu4s>S9@ zls@kp%vC(k*)LT*?;p(b$v-)tPZ7lXp1elhJ;71rwec6!B$oFEURHioHL&C3q>B}0 zLJQKAy489(&xMaVaA948_abI1d_Wb<_-<7(ZdaKK5U<5^`Cn4@tcPU)**>UC2umuG zmn-4W#d;pgrRA{V>s5JJCXsS(hjRag5#B%cJA6nr{HKaOuILd(|DxzSik?z*qH6do z4uIeB=kUCLw5qOdg|={GYc^?Twd=!6!s_0es$t?=vsn&|zub>DO&R=--rwe}my?D7ezz?KL5X8_fU>=wDRWhxFnX<6MO1hGae{W)+@$w=gL1lxxNG=KwB-^C&ms zg&zM2;=}w1;^b(&EJ57v^u?2QLI~gQ!xt!=$6v>b5VZCfz^JCH`cQe48gT`R#32Ek z{PTEDx|Diw1&YLTAMj%JAFEwIkbY*0=yYU!shFQ%NSzBu-7ngh3W(A7>v^Tm?-4HI zb(tC6e?E|YM&I8c8ZeXMtok88#uozD*r|(F055iqpicQ&p$2%9ZQxKV(tox{eO4Nw zsWI^TfEPQbuvhAbL{7cvwkcPS053Vo`@M~o}N7u7f>W9R`D*hEpWu3yWQ1Ov#@Q`f=KBHu|;P(f6 z>>wO9<#9=UR*3D=4{ME3I$uQn=Y%SkoA$4vdASn23!LKM_kR+&#>Or>4IdV4 z>w?8kpg&WLevd4IKK0ug)!xEz)|R$2Hg>zhZDQmgi(w~>Hag0Z!7-L-%IJuvTFtl- zwNvSgVP?BUTPo2Nw`?mKzJA&A>f%atrY2^X>9pBnU=uCfBihs0a5JLWM4|^KF3y0a z?NRO8k*q?M45M*fWOaklu%_O?85*x%R2cP});v zRbI?@uxVQ?9yf5%$&Mu~I%BoNilcYX`KM?mWptX!C>@4sx&@`+SeB8^SW$Uo%j@*^ zrZpXAIvUF+jJUNumdcp!`$B;Q-Zq32k?(G(b76*ovsv7W=+IWtlUUxP zU|zq@(J?P3!kM0gZMK5iX@_=l4jaH$x=VzU*cJ{)YMU0@W{2WBlG$);Hiom0v8V_W z*J)yVIvnju!kVe_(ngD=O-@uLph#b3HD9pUN<; zRCYW+E{wYhUjs_7CbsAK2-5=;93-07QkLy`-g+A_nq#s(&s&(j44FGAcLiuGax|A^ zd!FAg<@R&^S&!*9*wfsYd7d9L)l^CT`YTwTU!<6_J(;4 zro3K2_Oo#L?H>e2F`@cV;`I`y_)_vDD$AX6VBGdRPh+~@t&BXMVPv}3XRoOWGUfWR z8|Ill;p9#A&-mXUpuWfUJRj!27vR4O;Qq;Wd>?5(NKIsWUN7sO4-jd$Lkhoa&-6V= z-1dcef##TSIqZP#m>))lFfL!yG$|@~h^Um@$d7^xz$eI2`F=gNUsTX^GNen%O}Xzl z66d!@b0|ND^q!$_d9FW?pVYs(?v91?d+5s!UFj2YxvV<_8J~(2ox9r6IM0fT`tAP> Dw;H?b literal 0 HcmV?d00001 diff --git a/cscg24/pwn/intro-pwn-1/pwn1.c b/cscg24/pwn/intro-pwn-1/pwn1.c new file mode 100644 index 0000000..cafa804 --- /dev/null +++ b/cscg24/pwn/intro-pwn-1/pwn1.c @@ -0,0 +1,70 @@ +#include +#include +#include +#include +#include + +// pwn1: gcc pwn1.c -o pwn1 + +// --------------------------------------------------- SETUP + +void ignore_me_init_buffering() { + setvbuf(stdout, NULL, _IONBF, 0); + setvbuf(stdin, NULL, _IONBF, 0); + setvbuf(stderr, NULL, _IONBF, 0); +} + +void kill_on_timeout(int sig) { + if (sig == SIGALRM) { + printf("[!] Anti DoS Signal. Patch me out for testing."); + _exit(0); + } +} + +void ignore_me_init_signal() { + signal(SIGALRM, kill_on_timeout); + alarm(60); +} + +// --------------------------------------------------- MENU + +void WINgardium_leviosa() { + printf("┌───────────────────────┐\n"); + printf("│ You are a Slytherin.. │\n"); + printf("└───────────────────────┘\n"); + system("/bin/sh"); +} + +void welcome() { + char read_buf[0xff]; + printf("Enter your witch name:\n"); + gets(read_buf); + printf("┌───────────────────────┐\n"); + printf("│ You are a Hufflepuff! │\n"); + printf("└───────────────────────┘\n"); + printf(read_buf); +} + +void AAAAAAAA() { + char read_buf[0xff]; + + printf(" enter your magic spell:\n"); + gets(read_buf); + if(strcmp(read_buf, "Expelliarmus") == 0) { + printf("~ Protego!\n"); + } else { + printf("-10 Points for Hufflepuff!\n"); + _exit(0); + } +} +// --------------------------------------------------- MAIN + +void main(int argc, char* argv[]) { + ignore_me_init_buffering(); + ignore_me_init_signal(); + + welcome(); + AAAAAAAA(); +} + + diff --git a/cscg24/pwn/intro-pwn-1/ynetd b/cscg24/pwn/intro-pwn-1/ynetd new file mode 100755 index 0000000000000000000000000000000000000000..0b1b2b06920c5922696ce6dcec750fa6b7b7f54a GIT binary patch literal 18744 zcmeHPYjj)Hl|Hufa7~aLh*OgXxq#d{?Z{Zpqe+N~$aGk1(is*LGA%eH4X-W;6w;Iy;>Gi-K$0Om!Yg;aeID|) zV$GT#v(~KX@&Re@{hht{dGB+sd~R-9?u!|W<@v{ZeATyRUN(Q8XEn#Qi zdk&k;ra+#=F_GUO2y#X0DjrKqC0+tbb~|N$KAj`=6je1ON_K@(!Ben^Na%e{sQ=Cz|Y4gKP?6@-nbAp9=;R!baoEYz9l@V zI7sXDJT`-k$hfKE&U&d|o2S1=;thE?L%a!4cv;MnAtMzIvScia3dCB;iTU%dQn;^5DBr4a5TsQUBPgIYO^sBOU086=5^#O zmNE#X`o-d4jUZ}ANFoyMMrAjKjQEzQzq>ubI>V7rG{!o&B*I3BCBqy20V9mE1CdxV z#QcFk2oBoY13mus&T!Np310^-xTfZ#Tp~sy&>e>k^$#^PVYGMqsXZtq5stxeFI(+v zXQy^&EhGRnIQjZOHyA9BvXjaYFxgK zWD3pMaxN!GrjVRvT)viM+JdvkPXVavAi1365iWn1WZH_e2f2JX$rPfq!(6_EWD3pM zU0iM?nL={*9xg8bNPIdDdc81aCsKV6l$}rTt16r z3bEM+E|-x^p*35}a{F27GQh0rX6>|N_kpWH(~5IsVD;B8y$ zc~8IjT@AnqXKeD_7cmyphbC3g-mj+zT=YEV8P?Npx1`@Vq5t!4dN}V)x4D+I1Wx+W zuXU!IT-p;&u4yzt2bx^Vik$PCT;=93FhL%nPSVq+=LJ3UkgJaiAH&CE)VWU#xJu!g z=8?Jc3(LYhouOyykK#;YK8bqvKWCXEpqRORk5KJ>>9i!%kxts=5EgPRGwBAl$K*= z!NCS{K>bbi(m|c`22d&Lv~xf8yw{R`{u({~n%@7$@zyq9X7XnAt)4m4!nA|&Ht1Uw z%a$|t!48PM^@L7N5LtTCsK8R4i9A}WU$RD=^ZLl|K1re9!u1z55}AKWPaoI!9$lgD zJz1g`9nhaYg?<~F{2s=Q9F$rkoz8hpqxMw4zIr!oS!%&ry}$lxXkt{}G|tqA>fb`S zR>f{WW&m|OFnJObi>}_+S)^eU9OJ!n_yikI}qI?=w^22mj<8xDazf&s4(d0!6W9;!+22g0-g8s^!8ZzF!H z;I|R~*{9t7L&P5w{9)o>7yO(#;Qt`_R^p!#{Pn~?CitDi|C``nB>n-xm(B(MQ^7Y8 z{{zAI5Z^EO9hmFp7Qx>`_$I->NPIhZ-ecw}aG0Hs@`_h{7mY*9k3)yn>LGO1YHIJ# zg)M{6HR(4^4Py31Oh((7dcW;m*OETOhv^Cg0*d@&0>G6b0Q6f$&aJz_x1>LBNq_hs z;4mWf7K-#`Dg-&R7zOz~vq&rpKcSBKEs;uvZV&)vU zn?eQc2YULbFKwN;-+AZWzCW^orFds0wqVR#`fsd8Zp(144EHK;ETf!;azAlk3ryq`vY{ng&9yjOd#@wOud zjh6l{vTUWl0?}6bvk*s1U-Hg2RerAa5016Jd#wF!W9*k^SMdnb1gEO?k+JqykF~#a zjQz6gWZ0{2zXQuRuiJN`Lug`6!9?^My<+-h>WzF&BM2?$AnjDpj5`NUVI=vq9sGcg zsT`W;AhZl!Us3A$Xb+#77zp#`j}etJ6|ZCO_GQj|3#8MVZq~3sUIm}+Kpn_c>gHS< zw~?Dnq@r|9rn#IibbTm=o$qlUw%Jm%fgBEjgV&7kx&x&DWD$IRA6#m>_lah{71LPo z{a!kF48zV$>mzD*k#q2$Ad)JfaMmE4t>k1bN$))R7~0ItdV~yw^u~7yy9HIH0Su|BBm^1Bp`$gVKoFVnJH2&}doAEV5;ZH)r{G&auQRF>qH{NYm z_%pBXqF+hlpV{+$4!n!H|$5F%Q8xrr9?7tBjuUxu$t{(}tLS!kgZ|hk^umX*%B* ztMUyX{ht*(2X5p{nRD>Rq;28}qRAEK5wLUba49_}l<&c=h9`z5*ICZ#w7{|6%bU_~ zoBO1%0c1Z)k6#4dD8XHjY1uEaZBcg;*1x}@DLq14)IM>}-A%RIL-tfgIc(yfGt#E0 z0E&HQyFPSgRUNeGp^P^K>+dXdnE7)QM>A>*D6koXeN$oqfgOR7`3;F(Cb0d4T_CZG zK+T!|$sHV~j53*VK4|9-dH%&%Xk*5r(lgxmYgZp?#C$^$SC?-n=)(Ro9|Hh<2jR}a z%Y}50kZ1=)9`z0Kwvu$ctAV9rYX;vi%6;g*n~sa|`K8F~h1wH>y$ERF?qn@7RGFwD3>4y-PVRi|brKDL#n%xC6 z7(K>MW;sizw4?{NclML}ol=iS?VR4*$9P-QQPTU_&<|Y?Q7x!j>P5}~ZSE-hFj`@L z0*rcLI+dNNKSM({Lf%OLVWyZ0y` zH0QuH6rOFQ8VuD>Ba1H!3nnc}l|@WhyouPye=hJm<#_>*QNHvsZ1-_8%hX>%6eHBzbAJX%p_uF_t&$wNH zukg+PfmdSIdlCVF6^2PS%8q6a2=V4?^9+IoQQy-{lG3MV!E-;4W* zL2Yv=k;J_~t+vKfQ>RteE!5Wdd$qb+&o}1Rh#t_8s*>U8=2*Z_R|uC?Dckif+(JxV zt+@i-!7}=Bn&|B_4MrL!(6n zQi((;YAF4n=E5~hRgAU;H$KDBjT*2}z=$P!M-9olNIkkKq+N&>Ux+N!p00qVj1ce76{FsJMTOkS@ECg(s)?Jbnm?)WtEQ(LQM;3| z|K1L_O2;#F!@s@0r^A1cpt*1#Rkf2}P1OSNlxBpff1+A46o^HG$ZZSO>L4D1v3RIYbkH z=G%GPcpQ7-2h$5J$4%f4<8L$?5`RZB7NJ=a_ZwYFEf$URiiJ!1RY|_ev4phla5UVF zd%j5{9Doa~{i-Biv!v%PoXXhj^|jsjTCkv-k#1G8GveQvL>MSzwDJj4DG=-K#%d+) zx^Cun)3OJVK?YN?3sMqj1bmoyenT2lRPc1c8S_pEbhp{^)AHB3q^?(g7 zV9YML=t@u;xT{{atnEbqY*}~V$I=I1u`GmF_Ta0QMZY@!4)jUT$cSYf2VHJjRs-~Y zmxUhDcP;Bh(B=4PZ4S1E8PK6rblv5wsHePW_Oz*`JCIK}{Zd~G|M-~@KgUm{AJv%) zpN055`A5s*TZ^N-*-?3k^NcN}eQd?7i@vtNbw25l@>Td8hdur(!q_(*l|#!+YIIa@ zpX_ziZk^(FEa{)R+Hp@w$*H0;#}Z&(M|Gn^gDz|u9i>flF{~CJ6Q2*>vMl<;GWpwH ztUD^VQn~$;nj9O7e_!U%njDp0ZngRhra^5EbX(DXpU@VXSJ!3-y(NeH(a`xd#zdEX zGsTzX+SB3~E-wDDW4L4;G3&~}wNZU2HQ{qTY>xlMvO)wjQyW`yZCpidL|<&3qKh^* zM8|6%?`QghU*$WNWxqd7E+^7N4@~sHL=Q~#z+X=fsP~Z6dq?>#qiu+iqSJ(!d+|xV zqf&Z-$iM{>p49tJxbehOsie5o!;^aNiOvL+RQ`vjtQeO|I4s`523tw{HWK}zlv0Dt zR}YMIcA=#9!%87C{Be0ql4jV51uULsv7bvuonK^ejGr~2dZjE#;Y+?G>{Y!rS-yms zDj)YtczdADRqBEv9ko1tGZ%O)*q*Lf}H_}W=zar^kNt-2ICuygonU>5nA6 zU($yqJs{~JN#Bz6BT1*om#JpjU#dcV)cbj>SFT*9RpX8E`P$N&x|&+XYLZ>_j;6nZ z)!>EAP$JH1qA?>>voV^g=}3j~hB^-A0`fMtxDEeC#`C)Tc+RN__C}Mv-GUkkk)s}j zxSAC3vStlE1d@T|;&_Tdk$9uChW}<#gI6@e$cqL2hM(1hy4pJv_~oL#3y(%QNm#V| z6A6DW;}(i1D=GpGcy;jj5P9#D|iK z=ZdOvBzuba`Sx@ZjrxS@$CHdl{DBF8+UI00FH7-6d-1W`YtmlPT*IVMo_jWsZ!hDI zCh42XAkSWk?E884YQI)g?c+*6fBx=}_NxE$|6P;ERmV#Qs{fR~yYlP{{ktJbKfnC@ z^X#?7LQ~Phc@s9j{9RCY;G_0Ybv{x5u1LPVk`?_mY@IfHb$&Tq4-iS|329VT_>;(> zDys6;`_v=SK5zKcv{LTaOW( zR`!a%o@cMlPpm