zeropath-ctf/list.sh at main · ZeroPathAI/zeropath-ctf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
#!/usr/bin/env sh
# List all CTF challenges with details.

cat <<'EOF'
CVE               Language  Objective       Impact              Description
────────────────  ────────  ──────────────  ──────────────────  ─────────────────────────────────────────────────────────────
CVE-2016-6255     C         write_flag      arbitrary_write     libupnp: remote arbitrary file write via HTTP POST
CVE-2017-1000367  C         write_flag      privesc             sudo: local privesc via tty hijack in get_process_ttyname()
CVE-2018-6789     C         crash           heap_overflow       Exim: one-byte heap overflow in b64decode()
CVE-2019-10149    C         read_flag       rce                 Exim: remote command execution (versions 4.87–4.91)
CVE-2021-3156     C         crash           heap_overflow       sudo "Baron Samedit": heap overflow for local root
CVE-2022-23125    C         crash           stack_overflow      Netatalk: stack buffer overflow in copyapplfile()
CVE-2023-0297     Python    read_flag       rce                 pyLoad: pre-auth RCE via js2py code injection
CVE-2023-22809    C         write_flag      privesc             sudo: sudoedit privilege escalation (1.8.0–1.9.12p1)
CVE-2023-34105    C         read_flag       rce                 SRS: command injection in real-time video server
CVE-2024-4577     C         read_flag       rce                 PHP-CGI: argument injection bypassing CVE-2012-1823 fix
EOF