Username: 
Password: 
Restrict session to IP 
Online within 1d
Questions  |  score: 7  |  6,52 8,10 8,19 |  Solved By 186 People  |  79367 views  |  since Dec 24, 2011 - 21:15:51

Training: Warchall - 7 Tropical Fruits (Realistic, Linux, Shell, Exploit, Warchall)

This is level 7 on the warchall box.
You can find the vulnerable binary + sourcecode in "/home/level/07_tropical_fruits/".
You can also view the source here.
Your mission is to exploit it, circumvent the ASLR protection and read a file in the name of the executable.

Good Luck!

PHP Warning(2): require_once(/home/gizmore/www/geshi/src/geshi.php): Failed to open stream: No such file or directory in core/inc/util/GWF_BBCodeItem.php line 219


Backtrace starts in www/challenge/warchall/tropical/7/index.php line 18. GWF_Message::display()........ core/inc/util/GWF_Message.php line 229. GWF_BBCode::decode().......... core/inc/util/GWF_BBCode.php line 127. GWF_BBCodeItem->render()...... core/inc/util/GWF_BBCodeItem.php line 78. GWF_BBCodeItem->renderChilds() core/inc/util/GWF_BBCodeItem.php line 117. GWF_BBCodeItem->render()...... core/inc/util/GWF_BBCodeItem.php line 74. GWF_BBCodeItem->renderTag()... core/inc/util/GWF_BBCodeItem.php line 101. GWF_BBCodeItem->render_code(). core/inc/util/GWF_BBCodeItem.php line 410. GWF_BBCodeItem->renderCode().. core/inc/util/GWF_BBCodeItem.php line 219. require_once()................ core/inc/util/GWF_BBCodeItem.php line 219. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.