Access Control


CSE 365 - Fall 2023.

Exploit various access control issues for the POSIX/UNIX Discretionary Access Control model and answer questions about Mandatory Access Control models.


Access Control Pt. 1

Access Control Pt. 2

Recorded Lectures:

11/8/23 Access Control Pt. 1:



11/13/23 Access Control Pt. 2:



adamd has recorded lectures and slides from prior CSE 365 that might be useful:

Copy of S22 slides

Access Control Pt. 1 - S22


Access Control Pt. 2 - S22


Flag owned by you with different permissions

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Flag owned by you with different permissions

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Flag owned by you with different permissions

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

How does SETUID work?

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

How does SETUID and cp work?

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Flag owned by a different group

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Flag owned by you with different permissions, multiple users

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Flag owned by other users

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Flag owned by other users

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Flag owned by a group

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Find the flag using multiple users

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Find the flag using multiple users

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

One Mandatory Access Control question without categories

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Five Mandatory Access Control questions without categories

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

One Mandatory Access Control question with categories

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Five Mandatory Access Control questions with categories

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Automate answering 20 Mandatory Access Control questions with categories in one second

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Automate answering 64 Mandatory Access Control questions with categories in one second

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

Automate Answering 128 Mandatory Access Control questions with random levels and categories in one second

Connect with SSH

Link your SSH key, then connect with: ssh hacker@pwn.college

30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

Rank Hacker Badges Score