Description
A machine has been infected with the rootkit Hello Rootkitty, which prevents certain files from being read.
Your mission is to help the victim recover the content of the affected files.
Once you are connected to SSH (credentials: ctf:ctf), run ./wrapper to start the challenge.
A more complex variant of this challenge is available here: Hello Rootkitty (Harder).
Files
- docker-compose.yml
-
bzImage
2.52 MiB – 088a65479baaaee72ff805ce8662f874356ff0521e8ed52d8d756c6e873d06a7 -
initramfs.example.cpio
3.01 MiB – bd539b9877bdbf6fedc1f896be1b639591f43737d817d274a8e1372d2d4604d1 -
ecsc.ko
5.35 KiB – 60a0420e6e041a5064900044171cad04334a7aa926a9ec6dc945a64735453fd0
Author
Challenge Instructions
- First, download docker-compose.yml:
curl https://hackropole.fr/challenges/fcsc2020-pwn-hello-rootkitty/docker-compose.public.yml -o docker-compose.yml - Launch the challenge by executing in the same folder:
docker compose up - Then, in another console, access the challenge with SSH:
ssh -p 2222 ctf@localhost
In case you encounter problems, please consult the FAQ.
Flag
Submit your solution
You can submit your writeup for this challenge. Read the FAQ to learn how to proceed.
You need to be logged in to submit a writeup.