root
/
public
mirror of https://github.com/01-edu/public.git
14
27
Fork 0
Code Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
4948 Commits
41 Branches
11 Tags
349 MiB
 
 
 
 
 
 
Tree: da8abc376a
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'da8abc376a'
${ noResults }
public/subjects/cybersecurity/hole-in-bin
davhojt 78016943b0
docs(cybersecurity): add warning to advise that projects are for educative purposes only 		2 years ago
..
audit docs(hole-in-bin): improve audit format 2 years ago
resources docs(cibersecurity): add cibersecurity branch subjects to public 2 years ago
README.md docs(cybersecurity): add warning to advise that projects are for educative purposes only 2 years ago

README.md
escape_control_characters

Hole in Bin

Objective

The objective of the project is that you are comfortable in reverse engineering on a windows environment, because many systems (Bank ATMs, SCADA..) can run on windows.

Guidelines

You will have the exercise of creating a patch that will bypass the security of the program and display "please withdraw your money" in the color green, rather than an error message..

Advice

https://ghidra-sre.org/
http://www.ollydbg.de/
https://www.softpedia.com/get/Programming/Packers-Crypters-Protectors/PEiD-updated.shtml
https://www.red-gate.com/products/dotnet-development/reflector/

Submission and audit

Files that must be inside your repository:

  • a README.md file, Which explains all the steps you went through in order to bypass the program.

Don’t hesitate to double check the names of your folders and files to ensure they are correct!

⚠️ These methods and tools are for educational purposes only, so that you have a better understanding of how to protect against similar vulnerabilities. You must ensure that you do not attempt any exploit-type activity without the explicit permission of the owner of the machine, system or application. Failure to obtain permission risks breaking the law.