Description
A machine has been infected with the rootkit Hello Rootkitty, which prevents certain files from being read.
Your mission is to help the victim recover the content of the affected files.
Once you are connected to SSH (credentials: ctf:ctf), run ./wrapper to start the challenge.
A simpler variant of this challenge is available here: Hello Rootkitty.
Bonus: Can you get a root shell?
Files
- docker-compose.yml
-
bzImage
2.52 MiB – 088a65479baaaee72ff805ce8662f874356ff0521e8ed52d8d756c6e873d06a7 -
initramfs.example.cpio
3.01 MiB – bd539b9877bdbf6fedc1f896be1b639591f43737d817d274a8e1372d2d4604d1 -
ecsc.ko
5.23 KiB – 9a1e2e285bb491b812a3275530d6f6d86c73badfbdec57dbc6d3f84fc2e84ca9
Author
Challenge Instructions
- First, download docker-compose.yml:
curl https://hackropole.fr/challenges/fcsc2020-pwn-hello-rootkitty-harder/docker-compose.public.yml -o docker-compose.yml - Launch the challenge by executing in the same folder:
docker compose up - Then, in another console, access the challenge with SSH:
ssh -p 2222 ctf@localhost
In case you encounter problems, please consult the FAQ.
Flag
Submit your solution
You can submit your writeup for this challenge. Read the FAQ to learn how to proceed.
You need to be logged in to submit a writeup.