voidsecurity

This level has a setuid binary which acts as a wrapper to execute a php script. The php script uses preg_replace with "e...

Level 10 of nebula deals with race condition vulnerability. We have a setuid binary and a token file. The objective of this level ...

In this level we have a series of checks, which we have to satisfy inorder to execute commands using system() function. There are ...

We have to get a token to solve this level. But there is a security check getuid()==1000. To bypass this check, we make a copy of ...

Level 15 of nebula has a binary whose RPATH entry is pointing to /var/tmp/flag15. When a shared object dependency is first searche...

Level [ 17 ] in nebula is pretty straight forward. The first look of it reveals the use of python's potentially vulnerable fun...

In this post I will explain how ASLR can be defeated using information leak. I tried to solve Nebula [18] by taking advantage of ...

I noticed this vulnerability in Nebula [18] during a debugging session when trying to solve this level using format string vulnera...

Level [ 18 ] in Nebula has a handful of vulnerabilities. We will use a format string vulnerability in the function "notsupp...

Lets see how to solve level [19] in Nebula. The code given checks whether its parent process is root using /proc entry. int mai...