Offense - Category - Mustakimur Khandaker https://www.mustakim.info/categories/offense/ Offense - Category - Mustakimur Khandaker Mustakimenmustakcsecuet@gmail.com (Mustakimur Khandaker) mustakcsecuet@gmail.com (Mustakimur Khandaker)Fri, 24 Nov 2023 02:21:53 -0400 Essential Linux Commands for CTF https://www.mustakim.info/posts/linux-command-collection/ Fri, 24 Nov 2023 02:21:53 -0400 mustakcsecuet@gmail.com (Mustakimur Khandaker) https://www.mustakim.info/posts/linux-command-collection/ Hi

I decided to write down a collection of Linux commands that I have found useful. So, here we go:

Open Ports

Note: will keep it updated from time to time.

]]> Capture the Flag (CTF) https://www.mustakim.info/posts/session-1-introduction-miscellaneous/ Tue, 31 Aug 2021 22:50:32 -0400 mustakcsecuet@gmail.com (Mustakimur Khandaker) https://www.mustakim.info/posts/session-1-introduction-miscellaneous/ On behalf of the Institute of Cybersecurity and Privacy, UGA, I would like to invite you to join us in our upcoming UGA Capture The Flag (CTF) Workshop. This workshop will be open to all UGA Computer Science and CyberSecurity&Privacy students who are interested in learning practical cybersecurity skills and potentially joining the UGA CTF team.

Session #1: Introduction & Miscellaneous: Slides: http://www.mustakim.info/wp-content/uploads/2021/09/Intro-to-Workshop.pdf Discussed: – https://gctf-2018.appspot.com/#beginners/misc-letter – https://otterctf.com/challenges#PDFuck! – https://otterctf.com/challenges#ReCurse Exercise: – http://ctf.cs.uga.edu:8000/challenges#re||||||-1 – http://ctf.cs.uga.edu:8000/challenges#Experience-2 Refer:

]]> Overwrite GOT Entry from Buffer Overlapping https://www.mustakim.info/posts/buffer-overflow-over-the-function/ Wed, 28 Feb 2018 22:44:55 -0400 mustakcsecuet@gmail.com (Mustakimur Khandaker) https://www.mustakim.info/posts/buffer-overflow-over-the-function/ Problem description

First of all, the CTF is from pwnable.kr (problem name: passcode). The problem description is as follows: “Mommy told me to make a passcode based login system. My initial C code was compiled without any error! Well, there was some compiler warning, but who cares about that?” There is ssh to the problem server where you can find:

We have 3 files including the flag file which can only be read by the user or group root. The other text file is a source code “passcode.c” which we can view. There is one executable that is compiled from the source code provided. This executable has read accessibility to the flag. However, the source code looks following:

]]>