CVE-2021-3156 PoC — Sudo 缓冲区错误漏洞

Description

CTF for HDE 64 students at See Security College. Exploit a JWT (web part) & CVE-2021-3156 (LPE part).

介绍

# CTF-2021

# Notes

This CTF is not using DB for authentication. In addition to that, this CTF generates static tokens
because of the following:

1. Minimize the chances of a user solving this CTF in a different way

2. Minimize the chances of a user missing hints by modifying or bypassing web pages/tokens.

3. Less traffic 

4. More reliability for users solving this CTF.


ubuntu 20.04 is recommended for the LPE part.
If you clone this, please delete this README.md file because it contains some hints.

文件快照

备注