Program Misuse

Yellow Belt (ASU CSE 466)

Dates

Assigned: August 18, 2022 at 1:00pm (Arizona time)
(solves before this date will not appear on the default scoreboard)

Due: August 25, 2022 at 11:00am UTC-07:00 (Arizona time)
(after this date, the live session of the dojo will move on to the next module, though solves will still count for scoreboard ranking)

For ASU extra credit due dates, please log in with an @asu.edu email address.

Lectures and Reading

Some other useful resources:

A primer on Linux file permissions: https://wiki.archlinux.org/index.php/File_permissions_and_attributes
A primer on privilege escalation attacks against Linux hosts. The SUID abuse section has obvious implications for this assignment: https://payatu.com/guide-linux-privilege-escalation/
Some thoughts on abusing dangers in SUID executables: https://www.pentestpartners.com/security-blog/exploiting-suid-executables/
Another SUID attack tutorial: https://null-byte.wonderhowto.com/how-to/use-misconfigured-suid-bit-escalate-privileges-get-root-0173929/
Another SUID tutorial. It is focused on shell scripts, but there are insights that can be used: http://www.drdobbs.com/dangers-of-suid-shell-scripts/199101190

The following live sessions belong to this module.

Challenges

This challenge is part of a series that exposes you to very simple programs that let you directly read the flag!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that exposes you to very simple programs that let you directly read the flag!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that exposes you to very simple programs that let you directly read the flag!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that exposes you to very simple programs that let you directly read the flag!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that exposes you to very simple programs that let you directly read the flag!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that exposes you to very simple programs that let you directly read the flag!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that shows you that an over-privileged editor is a very powerful tool, indeed!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that shows you that an over-privileged editor is a very powerful tool, indeed!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that shows you that an over-privileged editor is a very powerful tool, indeed!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that require you to understand their output to derive the flag from it!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that require you to understand their output to derive the flag from it!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that require you to understand their output to derive the flag from it!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that require you to understand their output to derive the flag from it!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that require you to understand their output to derive the flag from it!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that require you to understand their output to derive the flag from it!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that require you to understand their output to derive the flag from it!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that force you to understand different archive formats!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that force you to understand different archive formats!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that force you to understand different archive formats!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that force you to understand different archive formats!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that force you to understand different archive formats!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that force you to understand different archive formats!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that force you to understand different archive formats!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will enable you to read flags by making them execute other commands!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will require some light programming to read the flag.!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will require some light programming to read the flag.!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will require some light programming to read the flag.!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that will require some light programming to read the flag.!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you get the flag by doing tricks with permissions!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you get the flag by doing tricks with permissions!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you get the flag by doing tricks with permissions!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you get the flag by doing tricks with permissions!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you read the flag because they let you program anything!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you read the flag because they let you program anything!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you read the flag because they let you program anything!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that let you read the flag because they let you program anything!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that just straight up weren't designed to let you read files!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that just straight up weren't designed to let you read files!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that just straight up weren't designed to let you read files!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that just straight up weren't designed to let you read files!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that just straight up weren't designed to let you read files!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that just straight up weren't designed to let you read files!

This challenge is imported from the cse365 dojo's misuse module!

This challenge is part of a series that show you how dangerous it is to allow users to load their own code as plugins into the program (but figuring out how is the hard part!)!

This challenge is imported from the cse365 dojo's misuse module!

Module Ranking

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

Rank		Hacker		Score