Smash The Stack

[0phidian]

Have you guys heard of, or played around with Smashthestack before? It's a pretty fun wargame to play around with. You ssh into one of their boxes and try to "level up" by escalating your privleges with a buffer overflow. I'll admit buffer overflows aren't my speacialty but it's still fun to play around and learn.

Edit: Of course as soon as I post the site wont respond, I promise thats the correct link though.

[not_essence2]

I've went to the site before, but I don't have the time (school, homework and parents), and I haven't reviewed buffer overflow for a long time now. However, it seems fun. Just like RootTheBox.

[centip3de]

Have you guys heard of, or played around with Smashthestack before? It's a pretty fun wargame to play around with. You ssh into one of their boxes and try to "level up" by escalating your privleges with a buffer overflow. I'll admit buffer overflows aren't my speacialty but it's still fun to play around and learn.

Edit: Of course as soon as I post the site wont respond, I promise thats the correct link though.

I've done quite a few of the ones in IO, I'm pretty sure all the way up to level 10? 15? Something like that. It's a fun thing to do on the side, although several of the one's were pretty unlikely to happen in a real-life scenario (something similar to HTS's missions), but it's still a hell of a way to spend an afternoon.

[Amazingred]

Sweet. Thats actually one i didn't know about. I'll check it out later on when i'm bored.

[LoGiCaL__]

What's the deal with this? Did it work? I want to check it out sounds interesting.

Here's something that might interest you although it is over at the moment but has a blog. They had two contests so far. Had a good turn out both times.

https://stripe-ctf.com/

You can click on sign in and create a new account to check out the last contests challenges.

[centip3de]

What's the deal with this? Did it work? I want to check it out sounds interesting.

Here's something that might interest you although it is over at the moment but has a blog. They had two contests so far. Had a good turn out both times.

https://stripe-ctf.com/

You can click on sign in and create a new account to check out the last contests challenges.

Essentially, you SSH into a box, and then gain admin access, allowing you to read a text file, giving you the password to advance to the next level. All of these challenges involve manipulating programs, and you occasionally get the source code to said programs. Sometimes the exploits are buffer overflow exploits (I think there are 3 in the IO challenges (They get pretty creative at the end... I think on one of them, I had to write a C program, reference it in a path variable, find the address of that variable, write a script in Python to NOP sled to the end of the buffer, and then input the address to my path variable, gaining admin access. Crazy shit.), some of them involve debugging and patching, and some of them are more creative exploits (Some programs rely on path local/environmental/path variables, which you can exploit), and some of them are... Well, they're hard to describe without giving away the answer.

Anyways, they're fun as hell, and I'd recommend them to just about anyone.