kernel


Kalevala.

First challanges focus on very basics of kernel modules. Then in small steps testing how messed up can we make the system by hotpatching the kernel. For me this was a nice way to learn some of kernel internals.



Challenges

Make a kernel module to access the flag

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Make a kernel module to communicate with the challenge binary to get the flag

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Make a kernel module that hides files/folders in directory '/' from command 'ls /' to get the flag.

Some might consider a syscall as an asm instruction that CPU executes on HW-level. But actually its a jump to another world called Kernel. Sys_call_table is used there as interface. Lets mess with it some. Unfortunately this is no longer so trivial in later kernel versions but luckily here should be doable.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Make a kernel module that hides files/folders in directory '/' from command 'ls /' to get the flag. kaslr on.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Make a kernel module that hides file '/challange' but not file '/flag' from command 'ls /' to get the flag. kaslr on.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Command 'ls /' should find a file named as 'l/e/t/s//r/o/c/k' to get the flag. kaslr on.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Challenge binary tries to find installed kernel module and then to kill itself. Fool it to exit correctly and hide your .ko and show your personality (this time in stdout) to get the flag. kaslr on.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Pass checks to get the flag. kaslr on.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

Feel free to run any binary. Pass checks to get the flag. kaslr on.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

As level11 but now some too simply non intended solutions should not be possible.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

7-Day | 30-Day | All-Time

Rank Hacker Badges Score