Skip to content

Latest commit

 

History

History
50 lines (33 loc) · 1.08 KB

File metadata and controls

50 lines (33 loc) · 1.08 KB

Full Chain - Wall Rose

Author

wxrdnx

Description

https://storage.googleapis.com/hitconctf2023/chal-wall-rose/wall-rose-a10160050459354487c14f76f6bbd783d8d02c91.tgz

Challenge
nc 34.80.190.155 30001

Instruction
You have a busybox shell running as user user
/home/user/rose.ko is a vulnerable kernel driver
Try exploiting /home/user/rose.ko to achieve privilege escalation
You may assumed that Busybox, the Linux kernel, and Qemu are not vulnerable.

Files
./share/rose.ko: The vulnerable driver
./src/rose.c: The source code of rose.c

Flag location
/home/user/flag

Notes
FG-KASLR is enabled
Your exploit should be kernel-agnostic. In other words, it should not rely on any kernel offsets

Distribution

  • wall-rose-a10160050459354487c14f76f6bbd783d8d02c91.tgz

Points

296

Solves

17

Writeup