chokmania / boot2root

Security Challenge.In a group, search for various means to pass root on the ISO given to you.

boot2root (subject)

Introduction

After all this hard work, you will have fun at last !

This project serves as a base so you can understand how to proceed in order penetrate a system you can legally access.

I suggest you use any existing method in order to really break this iso. Evaluation will be limited, but the skill you will show when exploiting your iso will be significantly rewarding for you, way beyond your grade.

Objectives

This project aims to make you discover computer security within different fields, through several easy challenges.

The more or less complex methods you will use will help you see computer systems differently.

You will encounter obstacles during this project, but let’s be clear: you will have to overcome these obstacles by yourselves. Think as a group, but first and foremost, have fun!!!!

Vulnerabilities

Name	Language	Sources
Writeup1	FR / EN	DIRB / GDB cheatsheet / GDB Breakpoints / GDB Conditions / Turtle Doc / Turtle Online / Buffer Overflow / Buffer Overflow exploit / Ret-to-libc
Writeup2	FR / EN	exploit-db / Dirty Cow (/etc/passwd) exploit-db / Dirty Cow (SUID) exploit-db / Dirty Cow Pokemon / Dirty Cow Explantion
Writeup3	FR / EN	SysLinux Config / SysLinux Specials Keys / Get root without password (Grub)
Writeup4	FR / EN	NopeSlide Attack / Shellcode 23 bytes

Authors

• Florian Blanchard
• Valentin Robert
• Julien Dumay
• Martin de Lagarde
• Mathieu Ginisty