Home Home
Scavenger Security
Cancel

2020 Metasploit Community CTF - Ace of Clubs (port 9009) [PrivEsc]

Port 9009 shows an OpenSSH service running. Our first step was to brute force the login, which resulted in us gaining access with the trivial user/password combination of admin:password. After a...

DekraCTF - Weird Chall [Pwn]

Weird Chall is an exploitable binary that uses libseccomp to filter Linux syscalls. The difficulty, then, relies on bypassing these restrictions. Let’s take a look at the main function of the bi...

DekraCTF - Goverse [IoT]

Goverse is a reversing challenge that got 11 solves. It MIPS binary written in Go. It is statically linked with the Go runtime, so we can run the binary file with qemu without needing to install...

DekraCTF - Echopwn [Pwn]

Echopwn is a simple binary that reads the user input twice and reflects it. Using checksec we can see that most memory protections are enabled, including stack canaries and address randomization...