triggered_tux/RasptestPi
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

aaa

Browse source
This commit is contained in:
Triggered_Tux 2019-01-23 12:01:27 -05:00
parent e6774e9e33
commit c9360587cb
35 changed files with 3191 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

26
Rhme-2016-master/challenges/binaries/avr_filesystem/avr_filesystem_readme.txt Normal file
View file

@ -0,0 +1,26 @@
We don't remember why, but we wanted a file system on an
AVR328p. After the system was completed we discovered that it lacked
basic security. A couple of beers later we came up with what we think
is a revolutionary way to do file system permissions. It is now your
task to fill in our shoes and test its security.
The filesystem allows you to request the contents of one or more
available files by using the following format:
token#<filename>[:<filename>]
So for example, a request would be:
933d86ae930c9a5d6d3a334297d9e72852f05c57#cat.txt:finances.csv
Some example files (token | call):
96103df3b928d9edc5a103d690639c94628824f5 | cat.txt
933d86ae930c9a5d6d3a334297d9e72852f05c57 | cat.txt:finances.csv
83f86c0ba1d2d5d60d055064256cd95a5ae6bb7d | cat.txt:finances.csv:joke.txt
ba2e8af09b57080549180a32ac1ff1dde4d30b14 | cat.txt:joke.txt
0b939251f4c781f43efef804ee8faec0212f1144 | finances.csv
4b0972ec7282ad9e991414d1845ceee546eac7a1 | finances.csv:joke.txt
715b21027dca61235e2663e59a9bdfb387ca7997 | joke.txt
Can you access any file you're not supposed to?