mirror of https://github.com/dirtbags/moth.git
Merge branch 'master' from laptop
Conflicts: doc/ideas.txt pwnables/service/sshd.pwn/run
This commit is contained in:
commit
939514d9f7
|
@ -14,7 +14,8 @@ Ideas for puzzles
|
||||||
* Broken startup scripts, when fixed award more points
|
* Broken startup scripts, when fixed award more points
|
||||||
* Lots of remote exploits
|
* Lots of remote exploits
|
||||||
* "qemu -net socket" vpn thingy and then...
|
* "qemu -net socket" vpn thingy and then...
|
||||||
* sfxrar packed with upx. Change an instruction so it won't actually execute.
|
* sfxrar packed with upx. Change an instruction so it won't actually
|
||||||
|
execute.
|
||||||
|
|
||||||
|
|
||||||
Capture the Packet
|
Capture the Packet
|
||||||
|
|
|
@ -49,7 +49,7 @@ main(int argc, char *argv[])
|
||||||
char *p;
|
char *p;
|
||||||
|
|
||||||
for (p = category; *p; p += 1) {
|
for (p = category; *p; p += 1) {
|
||||||
if (! isalnum(*p)) {
|
if ((! isalnum(*p)) && ('-' != *p)) {
|
||||||
cgi_page("Invalid category", "");
|
cgi_page("Invalid category", "");
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
|
@ -162,4 +162,6 @@ table.pollster thead {
|
||||||
font-weight: bold;
|
font-weight: bold;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
table.scoreboard {
|
||||||
|
height: 400px;
|
||||||
|
}
|
||||||
|
|
|
@ -1,14 +1,15 @@
|
||||||
#! /bin/sh
|
#! /bin/sh
|
||||||
|
|
||||||
port=8888
|
port=8888
|
||||||
|
host=10.0.0.10
|
||||||
|
|
||||||
blooper=$(tempfile)
|
blooper=$(tempfile)
|
||||||
trap "rm $blooper" 0
|
trap "rm $blooper" 0
|
||||||
|
|
||||||
echo foo | socat -t 0.01 STDIO UDP:127.0.0.1:8888 | tail -n +4 > $blooper
|
echo foo | socat -t 0.01 STDIO UDP:$host:$port | tail -n +4 > $blooper
|
||||||
|
|
||||||
for i in $(seq 8); do
|
for i in $(seq 8); do
|
||||||
result=$(socat -t 0.01 STDIO UDP:127.0.0.1:$port < $blooper | awk -F': ' '(NF > 1) {print $2; exit;}')
|
result=$(socat -t 0.01 STDIO UDP:$host:$port < $blooper | awk -F': ' '(NF > 1) {print $2; exit;}')
|
||||||
port=$(echo "ibase=8; $result" | bc)
|
port=$(echo "ibase=8; $result" | bc)
|
||||||
echo $port
|
echo $port
|
||||||
done
|
done
|
||||||
|
|
|
@ -1,8 +1,10 @@
|
||||||
#! /bin/sh
|
#! /bin/sh
|
||||||
|
|
||||||
if ! [ -d /opt/mcp ]; then
|
if [ -d /opt/mcp ]; then
|
||||||
hostname pwnables
|
sv d .
|
||||||
ifconfig eth0 10.0.0.10 netmask 255.0.0.0
|
exit
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
hostname pwnables
|
||||||
|
ifconfig eth0 10.0.0.10 netmask 255.0.0.0
|
||||||
exec inotifyd true $(pwd):x
|
exec inotifyd true $(pwd):x
|
||||||
|
|
|
@ -1,8 +1,10 @@
|
||||||
#! /bin/sh
|
#! /bin/sh
|
||||||
|
|
||||||
exec 2>&1
|
exec 2>&1
|
||||||
|
|
||||||
if [ -d /opt/mcp ]; then
|
if [ -d /opt/mcp ]; then
|
||||||
sv d .
|
sv d .
|
||||||
exit
|
exit
|
||||||
fi
|
fi
|
||||||
|
|
||||||
exec dropbear -r ./rsa.key -E -F
|
exec dropbear -r ./rsa.key -E -F
|
||||||
|
|
Loading…
Reference in New Issue