Skip to content

Latest commit

 

History

History
36 lines (24 loc) · 809 Bytes

README.md

File metadata and controls

36 lines (24 loc) · 809 Bytes
Raw

AleJndFlag

AleJndFlag is a "flag puller" used to get the flag from the scoreboard server. The flag returns is differ based on the entrypoints used by the attacker.

Single flag mode:

alt text

Multi flag mode:

alt text

Usage

Install the dependencies

NOTE : Make sure to set the INTERFACE in file get_flag.cpp to the configured interface name.

$ sudo apt-get install libjsoncpp-dev libcurl4-openssl-dev libssl-dev
$ make single - for single flag mode
$ ./get_flag

For multi flag mode, make sure to define the vulnerable service SUID inside the service_info structure in include/services.h.

struct services_info service[] =
{
    {1000},
    {1001}
};

Then update the FLAGSUBMIT_URL in get_flag.cpp.