Nome Utente: 
Password : 
Restringi sessione all'IP 
Online in 1gg

Direction  Vai alla sfida "Warchall: Nurxxed"

Posizione globale: 190
Punteggio totale: 112549
Posts : 11
Grazie: 5
Voti+: 8
Registrato: 10a 199gg



L'utente è Offline
Direction
Google/traduci1Grazie!1Bel post!0Brutto post! Link
I have employed many methods to try and solve the challenge, however I seem to be at a dead end.

I don't want to spoil too much so I'll try to be discrete:
I've :
-used various CVEs from 2013 and 2014
-Read many 'famous' papers dealing with reverse shell'S:' with heap exploitation
-Read large portions of the PHP manual and GWF code in an attempt to find objects that meet the requirements (none of them are accessible :( )
-(somewhat) Identified the version of PHP I'm running under
-Tried to find 0-days in the PHP interpreter ;P
-Looked at commit history on Github for the challenge.

Please understand that I'm not too familiar with PHP dev as I like JS more :)
Posizione globale: 2
Punteggio totale: 747640
Posts : 441
Grazie: 501
Voti+: 478
Registrato: 17a 98gg












L'utente è Offline
RE: Direction
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Stay with the code you are given. I think nurfed knows better than to use GWF. Drool

You might have missed something in your research.
Posizione globale: 190
Punteggio totale: 112549
Posts : 11
Grazie: 5
Voti+: 8
Registrato: 10a 199gg



L'utente è Offline
RE: Direction
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Thanks dloser!

Update before I rest:

I've attempted to perform more reconnaissance on the challenge by logging into the Warchall box.
There's an interesting 'difference' that I've noted, and I think it has something to do with a certain comment I found as well...
Since then I've found a couple of modules to look deeper into. Should I figure out how to wakeup tomorrow morning, or am I on the wrong track?

Thanks
Posizione globale: 2
Punteggio totale: 747640
Posts : 441
Grazie: 501
Voti+: 478
Registrato: 17a 98gg












L'utente è Offline
RE: Direction
Google/traduci1Grazie!3Bel post!0Brutto post! Link
As long as you are researching new things, even if they do not lead to a solution, you are on a right track... ;)
WindAI, Redknee, ckclark, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 4810 volte.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.