https://github.com/agiraudet/snowcrash

CTF-type challenge, exploring various exploitation methods
https://github.com/agiraudet/snowcrash

ctf-writeups exploit redteam

Last synced: 11 months ago
JSON representation

CTF-type challenge, exploring various exploitation methods

• Host: GitHub
• URL: https://github.com/agiraudet/snowcrash
• Owner: agiraudet
• Created: 2024-04-24T15:30:53.000Z (about 2 years ago)
• Default Branch: master
• Last Pushed: 2024-08-21T09:35:55.000Z (almost 2 years ago)
• Last Synced: 2025-01-10T17:42:24.273Z (over 1 year ago)
• Topics: ctf-writeups, exploit, redteam
• Language: C
• Homepage:
• Size: 9.77 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# Project SECURITY: Snow Crash

## Summary

Project SECURITY: Snow Crash serves as an introductory exploration into the realm of cyber security. Through a series of challenges, participants will delve into various aspects of cyber security, gaining insights into vulnerabilities and defense mechanisms within IT systems.

Log in as user level00 on a vm booted from the ISO given with the project, and try to escalate to the next user until the end.

## Method Tracking Table

| Exercise  | Method Used               |

|-----------|---------------------------|

| level00   | Cesar code                |

| level01   | Hash cracking             |

| level02   | Packet Capture analysis   |

| level03   | $PATH hijacking           |

| level04   | Perl input exploitation   |

| level05   | Cron abuse                |

| level06   | PHP eval                  |

| level07   | env manipulation          |

| level08   | Malicious symbolic link   |

| level09   | ROT key                   |

| level10   | Race condition            |

| level11   | Lua eval                  |

| level12   | Unsanitized eval input    |

| level13   | CMP bypass                |

| level14   | Binary exploitation       |