voidsecurity
Yet another blog by a security enthusiast !
Vulnerabilities
(Move to ...)
Writeups
List of Vulnerabilities
Papers and other blogs
▼
Monday, December 31, 2012
29C3 CTF - Exploitation 200 - ru1337 [Team xbios]
›
The given binary is a ELF 32-bit, dynamically linked executable with NX. Below is the important section of the challenge dest =...
2 comments:
Sunday, December 23, 2012
Exploit Exercise - PHP preg_replace
›
This level has a setuid binary which acts as a wrapper to execute a php script. The php script uses preg_replace with "e...
Exploit Exercise - Race Condition
›
Level 10 of nebula deals with race condition vulnerability. We have a setuid binary and a token file. The objective of this level ...
Saturday, December 22, 2012
Exploit Exercise - Level [11]
›
In this level we have a series of checks, which we have to satisfy inorder to execute commands using system() function. There are ...
4 comments:
Exploit Exercise - Level [13]
›
We have to get a token to solve this level. But there is a security check getuid()==1000. To bypass this check, we make a copy of ...
Wednesday, November 28, 2012
Some Random Binaries [0x02]
›
Stage6 binary takes argv[1] and argv[2] as input. There is couple of strcpy() calls. First call copies argv[1] into stack buffer a...
Some Random Binaries [0x01]
›
During my free time I worked with some old binaries from here . All the binaries are 32-bit executable, stripped and had no modern...
‹
›
Home
View web version