Nome Utente: 
Password : 
Restringi sessione all'IP 
Online in 1gg

Dead end?  Vai alla sfida "Training: Warchall - 7 Tropical Fruits"

Posizione globale: 8303
Punteggio totale: 1197
Posts : 1
Grazie: 1
Voti+: 1
Registrato: 3a 90gg
Ultima visita: 2a 229gg
L'utente è Offline
Dead end?
Google/traduci1Grazie!1Bel post!0Brutto post! Link
I've been trying to solve this challenge for some time but I've ran out of ideas. The elf x86-64 binary is position independent so I can't predict or bruteforce the addresses of the gadgets needed for ROP or stack juggling since there is no information leak, Even though the stack is executable I didn't find any way to redirect the execution to some useful address on the stack. What am I missing?
Posizione globale: 5
Punteggio totale: 607613
Posts : 324
Grazie: 335
Voti+: 341
Registrato: 17a 13gg







Ultima visita: 114gg 10ore
L'utente è Offline
RE: Dead end?
Google/traduci1Grazie!1Bel post!0Brutto post! Link
The challenge hasn't been solved since the server move, so it might be broken -- haven't checked tho.
Can anyone confirm if it is working (or not)?
Posizione globale: 14333
Punteggio totale: 201
Posts : 1
Grazie: 1
Voti+: 1
Registrato: 2a 293gg
Ultima visita: 2a 274gg
L'utente è Offline
RE: Dead end?
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Citazione da cyberrac
18 Ago 2023 - 06:10:58

I've been trying to solve this challenge for some time but I've ran out of ideas. The elf x86-64 binary is position independent so I can't predict or bruteforce the addresses of the gadgets needed for ROP or stack juggling since there is no information leak, Even though the stack is executable I didn't find any way to redirect the execution to some useful address on the stack. What am I missing?
Posizione globale: 5
Punteggio totale: 607613
Posts : 324
Grazie: 335
Voti+: 341
Registrato: 17a 13gg







Ultima visita: 114gg 10ore
L'utente è Offline
RE: Dead end?
Google/traduci1Grazie!2Bel post!0Brutto post! Link
We changed the challenge a bit to reflect the behavior of the original binary. This also gives as the opportunity for a sequel. ;)
Happy challenging!
Posizione globale: 5
Punteggio totale: 607613
Posts : 324
Grazie: 335
Voti+: 341
Registrato: 17a 13gg







Ultima visita: 114gg 10ore
L'utente è Offline
RE: Dead end?
Google/traduci1Grazie!1Bel post!0Brutto post! Link
Restored the original binary for the challenge.
Redknee, ckclark, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 2549 volte.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.