Exploit Exercises-virtual machines

[geXXos]

You may find this helpful


http://exploit-exercises.com/

exploit-exercises.com provides a variety of virtual machines, documentation and challenges that can be used to learn about a variety of computer security issues such as privilege escalation, vulnerability analysis, exploit development, debugging, reverse engineering.

[Corrupted_Fear]

Very nice find, this will be useful when I have time to kill. +1 for you.

[geXXos]

Thank you, i'm trying Nebula 01, it  gives you some C code, which has a bug in it which i try to exploit, but ....but

[Corrupted_Fear]

stack overflow? or just an issue in the code?

[geXXos]

It must be something with the echo calling.

Code: [Select]

#include <stdlib.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <sys/types.h>
#include <stdio.h>
 


int main(int argc, char **argv, char **envp)
{
 gid_t gid;
 uid_t uid;
 gid = getegid();
 uid = geteuid();
 
 setresgid(gid, gid, gid);
 setresuid(uid, uid, uid);
 
 system("/usr/bin/env echo and now what?");
}

[Axon]

This looks interesting, thanks