From 646c1d66522205bb730957e7e95ab790a1fa462b Mon Sep 17 00:00:00 2001 From: letmein Date: Mon, 22 Oct 2018 20:01:18 +0800 Subject: [PATCH 01/26] + docker file --- ku-ingin-lompat-sambil-jumping/Dockerfile | 38 ++++++++++++++++++ .../{ => chall}/ingin_melompat2 | Bin 10864 -> 10864 bytes .../ingin_melompat2.c | 4 +- ku-ingin-melompat/Dockerfile | 38 ++++++++++++++++++ ku-ingin-melompat/{ => chall}/ingin_melompat | Bin service-diary/diary32bit/Dockerfile | 38 ++++++++++++++++++ service-diary/{ => diary32bit/chall}/diary32 | Bin service-diary/{ => diary32bit}/diary32.c | 0 service-diary/diary64bit/Dockerfile | 38 ++++++++++++++++++ service-diary/{ => diary64bit/chall}/diary64 | Bin service-diary/{ => diary64bit}/diary64.c | 0 11 files changed, 154 insertions(+), 2 deletions(-) create mode 100644 ku-ingin-lompat-sambil-jumping/Dockerfile rename ku-ingin-lompat-sambil-jumping/{ => chall}/ingin_melompat2 (84%) create mode 100644 ku-ingin-melompat/Dockerfile rename ku-ingin-melompat/{ => chall}/ingin_melompat (100%) create mode 100644 service-diary/diary32bit/Dockerfile rename service-diary/{ => diary32bit/chall}/diary32 (100%) rename service-diary/{ => diary32bit}/diary32.c (100%) create mode 100644 service-diary/diary64bit/Dockerfile rename service-diary/{ => diary64bit/chall}/diary64 (100%) rename service-diary/{ => diary64bit}/diary64.c (100%) diff --git a/ku-ingin-lompat-sambil-jumping/Dockerfile b/ku-ingin-lompat-sambil-jumping/Dockerfile new file mode 100644 index 0000000..8cce19c --- /dev/null +++ b/ku-ingin-lompat-sambil-jumping/Dockerfile @@ -0,0 +1,38 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +#RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken +#RUN apt-get update +#RUN apt-get update && apt-get install -y apt-transport-https +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP/ubuntu14/2.x/updates/2.4.2.0 HDP main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP-UTILS-1.1.0.20/repos/ubuntu14 HDP-UTILS main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb [arch=amd64] https://apt-mo.trafficmanager.net/repos/azurecore/ trusty main' >> /etc/apt/sources.list.d/azure-public-trusty.list + +# install socat editor ssh +#RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y +#RUN apt-get install socat lib32ncurses5 -y +RUN apt-get update && apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall +WORKDIR /chall + +RUN echo 'KSL{Welc0me_t0_PWn_W0rLd!1!}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /var/tmp /usr/bin/* /bin/* /dev/shm +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python + + +RUN chown root:ksl /chall/ingin_melompat2 # ubah nama file +RUN chmod 775 /chall/ingin_melompat2 # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/ingin_melompat2,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/ku-ingin-lompat-sambil-jumping/ingin_melompat2 b/ku-ingin-lompat-sambil-jumping/chall/ingin_melompat2 similarity index 84% rename from ku-ingin-lompat-sambil-jumping/ingin_melompat2 rename to ku-ingin-lompat-sambil-jumping/chall/ingin_melompat2 index 6124634f6e0c1fe6e7ba54fc77c1146481dcb333..790665cf30f2d1f6f744311cb92b94d1841a2237 100755 GIT binary patch delta 509 zcmewm@*!kG3u_M_14GZm&V0@#JPZs=dRRD?OlD-9E@BoCb*0iUai8H?ugpWgDxd9P zk6ONY4dWX&)9P*(ju-uZ{{L@2!jdrq#A$+Zc7r&jP|j%(Cj-j4Gx;osJmb^JZ#m=` zUrgrVRAlU#tj8(E_km1_p+lpa1`F0n&SbbPbT6^y~ls6F_0t!HE z0K``&TkD*C%fTlBXtL1d=(EKLW|)lLh&t z86Qm6<@09!0<@KBb0c3cuOKL@K!z|g2!bdEj?GV{>lqn4Ca22!GcMV@RrWe3qs-)9 Yb$M1uq;6DKX65K*;o#VOQ++xU03i^`J^%m! delta 518 zcmewm@*!kG3u^}-14GBe&V0@VJPZsAdRRCXOlD-9F7ny`ueryWl@&@&^Tk%aTj0FI zeQW*ZHH>fAOe?xsI9~Ms`TxK92usEk5T^;s*$(2ALOI7loD3-E#^kdc@{A8BzvYl) zd@`AbQ<1S_vL2@to}z~JwP&X zU>T0rdKqybu0KR!7Q>6JK-R(pkm{<bteaMOLAL+ zfkIJfQsv|dZu!kKxFr|^3x53nKY@XPq2TBL|673c0U%uiq^JG*|NjJ#UJ0aM0O{92 znuC#n;UAFJ0MZA5R(b$wYoPZsfONs%|NmQn^o7Zcyy~JhKvS52xJc`A^+J$WmTJU96&kSv(|l~-Q&G|&!xpjix#d>pMzPQ0u@ zrUwwK0L7k6HsteW{4u$fuYd9cK9L2(9@XJBR!1W^nuo1aS8GcvYJPL=g% jT(Eho>~&5?iOId{@~n{9-Keh2%F@fi!Ls?L`gA4$dcDYp diff --git a/ku-ingin-lompat-sambil-jumping/ingin_melompat2.c b/ku-ingin-lompat-sambil-jumping/ingin_melompat2.c index 9a8df08..18ef5f8 100644 --- a/ku-ingin-lompat-sambil-jumping/ingin_melompat2.c +++ b/ku-ingin-lompat-sambil-jumping/ingin_melompat2.c @@ -38,9 +38,9 @@ void jual_burung(){ } void menu(){ printf("+--------------------------------+\n"); - printf("------------PASAR BURUNG----------\n"); + printf("---------PASAR BURUNG 2.0---------\n"); printf("+--------------------------------+\n"); - printf("1. beli flag (999999 ruby)\n"); + printf("1. beli flag (sawit 1 hektar)\n"); printf("2. beli garuda (10 ruby)\n"); printf("3. lihat burung yang udah di beli\n"); printf("4. jual burung\n"); diff --git a/ku-ingin-melompat/Dockerfile b/ku-ingin-melompat/Dockerfile new file mode 100644 index 0000000..fcad5f4 --- /dev/null +++ b/ku-ingin-melompat/Dockerfile @@ -0,0 +1,38 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +#RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken +#RUN apt-get update +#RUN apt-get update && apt-get install -y apt-transport-https +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP/ubuntu14/2.x/updates/2.4.2.0 HDP main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP-UTILS-1.1.0.20/repos/ubuntu14 HDP-UTILS main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb [arch=amd64] https://apt-mo.trafficmanager.net/repos/azurecore/ trusty main' >> /etc/apt/sources.list.d/azure-public-trusty.list + +# install socat editor ssh +#RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y +#RUN apt-get install socat lib32ncurses5 -y +RUN apt-get update && apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall +WORKDIR /chall + +RUN echo 'KSL{W1th_R3turn_Y0U_C4n_Ch4nges_w0RlD}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /var/tmp /usr/bin/* /bin/* /dev/shm +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python + + +RUN chown root:ksl /chall/ingin_melompat # ubah nama file +RUN chmod 775 /chall/ingin_melompat # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/ingin_melompat,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/ku-ingin-melompat/ingin_melompat b/ku-ingin-melompat/chall/ingin_melompat similarity index 100% rename from ku-ingin-melompat/ingin_melompat rename to ku-ingin-melompat/chall/ingin_melompat diff --git a/service-diary/diary32bit/Dockerfile b/service-diary/diary32bit/Dockerfile new file mode 100644 index 0000000..20a157e --- /dev/null +++ b/service-diary/diary32bit/Dockerfile @@ -0,0 +1,38 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +#RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken +#RUN apt-get update +#RUN apt-get update && apt-get install -y apt-transport-https +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP/ubuntu14/2.x/updates/2.4.2.0 HDP main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP-UTILS-1.1.0.20/repos/ubuntu14 HDP-UTILS main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb [arch=amd64] https://apt-mo.trafficmanager.net/repos/azurecore/ trusty main' >> /etc/apt/sources.list.d/azure-public-trusty.list + +# install socat editor ssh +#RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y +#RUN apt-get install socat lib32ncurses5 -y +RUN apt-get update && apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall +WORKDIR /chall + +RUN echo 'KSL{Y0u_N0w_H0w_contr0l_St4cK!1!1}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /var/tmp /usr/bin/* /bin/* /dev/shm +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python + + +RUN chown root:ksl /chall/diary32 # ubah nama file +RUN chmod 775 /chall/diary32 # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/diary32,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/service-diary/diary32 b/service-diary/diary32bit/chall/diary32 similarity index 100% rename from service-diary/diary32 rename to service-diary/diary32bit/chall/diary32 diff --git a/service-diary/diary32.c b/service-diary/diary32bit/diary32.c similarity index 100% rename from service-diary/diary32.c rename to service-diary/diary32bit/diary32.c diff --git a/service-diary/diary64bit/Dockerfile b/service-diary/diary64bit/Dockerfile new file mode 100644 index 0000000..1d4df85 --- /dev/null +++ b/service-diary/diary64bit/Dockerfile @@ -0,0 +1,38 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +#RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken +#RUN apt-get update +#RUN apt-get update && apt-get install -y apt-transport-https +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP/ubuntu14/2.x/updates/2.4.2.0 HDP main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb http://private-repo-1.hortonworks.com/HDP-UTILS-1.1.0.20/repos/ubuntu14 HDP-UTILS main' >> /etc/apt/sources.list.d/HDP.list +#RUN echo 'deb [arch=amd64] https://apt-mo.trafficmanager.net/repos/azurecore/ trusty main' >> /etc/apt/sources.list.d/azure-public-trusty.list + +# install socat editor ssh +#RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y +#RUN apt-get install socat lib32ncurses5 -y +RUN apt-get update && apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall +WORKDIR /chall + +RUN echo 'KSL{Y0u_N0w_H0w_contr0l_St4cK!1!1}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /var/tmp /usr/bin/* /bin/* /dev/shm +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python + + +RUN chown root:ksl /chall/diary64 # ubah nama file +RUN chmod 775 /chall/diary64 # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/diary64,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/service-diary/diary64 b/service-diary/diary64bit/chall/diary64 similarity index 100% rename from service-diary/diary64 rename to service-diary/diary64bit/chall/diary64 diff --git a/service-diary/diary64.c b/service-diary/diary64bit/diary64.c similarity index 100% rename from service-diary/diary64.c rename to service-diary/diary64bit/diary64.c From 3a9c3673cc137b81450c509b1f3ed060e3d7b4cb Mon Sep 17 00:00:00 2001 From: Candra Date: Mon, 22 Oct 2018 20:45:35 +0800 Subject: [PATCH 02/26] Upload files to 'Service Agent' --- Service Agent/Service Agent.rb | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 Service Agent/Service Agent.rb diff --git a/Service Agent/Service Agent.rb b/Service Agent/Service Agent.rb new file mode 100644 index 0000000..6ec0bec --- /dev/null +++ b/Service Agent/Service Agent.rb @@ -0,0 +1,20 @@ +#!/usr/bin/ruby + +puts "================================================================================================================================================================================================" +puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" +puts "================================================================================================================================================================================================" +print "Masukan Kode Rahasia Agen: " +code = gets.chomp + +if code == "KSL_SECRET_TEAM007" then + puts "================================================================================================================================================================================================" + puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" + puts "================================================================================================================================================================================================" + print "Enter Secret Command : " + sc = gets.chomp + system("#{sc}") +else + abort "Maaf Kode yang anda salah!" +end + + From df75d4e84105de015b41328ef17f8b82f0d49ba0 Mon Sep 17 00:00:00 2001 From: Candra Date: Mon, 22 Oct 2018 21:01:17 +0800 Subject: [PATCH 03/26] Delete 'Service Agent/Service Agent.rb' --- Service Agent/Service Agent.rb | 20 -------------------- 1 file changed, 20 deletions(-) delete mode 100644 Service Agent/Service Agent.rb diff --git a/Service Agent/Service Agent.rb b/Service Agent/Service Agent.rb deleted file mode 100644 index 6ec0bec..0000000 --- a/Service Agent/Service Agent.rb +++ /dev/null @@ -1,20 +0,0 @@ -#!/usr/bin/ruby - -puts "================================================================================================================================================================================================" -puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" -puts "================================================================================================================================================================================================" -print "Masukan Kode Rahasia Agen: " -code = gets.chomp - -if code == "KSL_SECRET_TEAM007" then - puts "================================================================================================================================================================================================" - puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" - puts "================================================================================================================================================================================================" - print "Enter Secret Command : " - sc = gets.chomp - system("#{sc}") -else - abort "Maaf Kode yang anda salah!" -end - - From c792bf57417a6b08e36f70efc982950d43efe5be Mon Sep 17 00:00:00 2001 From: root Date: Mon, 22 Oct 2018 21:06:16 +0800 Subject: [PATCH 04/26] commit1 --- Service Agent.rb | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100755 Service Agent.rb diff --git a/Service Agent.rb b/Service Agent.rb new file mode 100755 index 0000000..6ec0bec --- /dev/null +++ b/Service Agent.rb @@ -0,0 +1,20 @@ +#!/usr/bin/ruby + +puts "================================================================================================================================================================================================" +puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" +puts "================================================================================================================================================================================================" +print "Masukan Kode Rahasia Agen: " +code = gets.chomp + +if code == "KSL_SECRET_TEAM007" then + puts "================================================================================================================================================================================================" + puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" + puts "================================================================================================================================================================================================" + print "Enter Secret Command : " + sc = gets.chomp + system("#{sc}") +else + abort "Maaf Kode yang anda salah!" +end + + From df2ba48ab14d927447b9f2e94fe39246731f0bd0 Mon Sep 17 00:00:00 2001 From: root Date: Mon, 22 Oct 2018 21:43:50 +0800 Subject: [PATCH 05/26] Service Agent --- Service Agent/Service Agent.rb | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100755 Service Agent/Service Agent.rb diff --git a/Service Agent/Service Agent.rb b/Service Agent/Service Agent.rb new file mode 100755 index 0000000..6ec0bec --- /dev/null +++ b/Service Agent/Service Agent.rb @@ -0,0 +1,20 @@ +#!/usr/bin/ruby + +puts "================================================================================================================================================================================================" +puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" +puts "================================================================================================================================================================================================" +print "Masukan Kode Rahasia Agen: " +code = gets.chomp + +if code == "KSL_SECRET_TEAM007" then + puts "================================================================================================================================================================================================" + puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" + puts "================================================================================================================================================================================================" + print "Enter Secret Command : " + sc = gets.chomp + system("#{sc}") +else + abort "Maaf Kode yang anda salah!" +end + + From 3693e8bc2b026c4d8287270ebe50eaa08bac3b58 Mon Sep 17 00:00:00 2001 From: OkaAditya Date: Tue, 23 Oct 2018 16:33:39 +0800 Subject: [PATCH 06/26] Update 'Kepala/header.rb' --- Kepala/header.rb | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/Kepala/header.rb b/Kepala/header.rb index edf471d..f4749b8 100644 --- a/Kepala/header.rb +++ b/Kepala/header.rb @@ -3,6 +3,10 @@ puts "By: Oka Aditya" print "Masukan Alamat Web : " url = gets.chomp -puts "Silakan mengunjungi link di bawah untuk mendapatkan headernya" +if url.include? "|" or url.include? "&&" or url.include "||" + abort "Hacking Detected" -system("curl -I -s #{url} | curl -F 'clbin=<-' https://clbin.com") +else + puts "Silakan mengunjungi link di bawah untuk mendapatkan headernya" + system("curl -I -s #{url} | curl -F 'clbin=<-' https://clbin.com") +end From 6e0c50e620655cb7f7c5ac480e10375f2dff9ab5 Mon Sep 17 00:00:00 2001 From: OkaAditya Date: Wed, 24 Oct 2018 19:09:47 +0800 Subject: [PATCH 07/26] Upload files to 'Kepala' --- Kepala/Dockerfile | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 Kepala/Dockerfile diff --git a/Kepala/Dockerfile b/Kepala/Dockerfile new file mode 100644 index 0000000..95099a0 --- /dev/null +++ b/Kepala/Dockerfile @@ -0,0 +1,33 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken + +# install socat editor ssh +RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev ruby-full -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall +WORKDIR /chall + +RUN cp /usr/bin/ruby /usr/local/bin/ +RUN cp /usr/bin/curl /usr/local/bin/ +RUN echo 'KSL{n0T_0nLy_p1P3_L1n3_C4n_D0_Th4T}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /usr/bin/* /bin/* /dev/shm +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python /usr/bin/ruby + + +RUN chown root:ksl /chall/header.rb # ubah nama file +RUN chmod 775 /chall/header.rb # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:5550,reuseaddr,fork EXEC:"/chall/header.rb,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] From cba790cd0683f653ac6163446ddffd8f454a13b6 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 24 Oct 2018 21:53:52 +0800 Subject: [PATCH 08/26] Penambahan file baru 241018 --- Dockerfile | 32 ++++++++++++++++++++++++++++++++ chall/service_agent.rb | 27 +++++++++++++++++++++++++++ server.sh | 2 ++ 3 files changed, 61 insertions(+) create mode 100644 Dockerfile create mode 100755 chall/service_agent.rb create mode 100755 server.sh diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..e044cfc --- /dev/null +++ b/Dockerfile @@ -0,0 +1,32 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken + +# install socat editor ssh +RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev ruby-full -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall #membuat direktory chall +WORKDIR /chall #direktory chall akan digunakan sebagai tempat kerja + +RUN cp /usr/bin/ruby /usr/local/bin/ +RUN echo 'KSL{t3RM1naL_Linux_3azy}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /usr/bin/* /bin/* /dev/shm #memberi hak akses +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python /usr/bin/ruby + + +RUN chown root:ksl /chall/service_agent.rb # ubah nama file +RUN chmod 775 /chall/service_agent.rb # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/service_agent.rb,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/chall/service_agent.rb b/chall/service_agent.rb new file mode 100755 index 0000000..b10b1a2 --- /dev/null +++ b/chall/service_agent.rb @@ -0,0 +1,27 @@ +#!/usr/local/bin/ruby + +def main + puts "================================================================================================================================================================================================" + puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" + puts "================================================================================================================================================================================================" + print "Masukan Kode Rahasia Agen: " + code = gets.chomp + + if code == "KSL_SECRET_TEAM007" then + puts "================================================================================================================================================================================================" + puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" + puts "================================================================================================================================================================================================" + print "Enter Secret Command : " + sc = gets.chomp + system("#{sc}") + else + abort "Maaf Kode yang anda salah!" + end +end + +if __FILE__ == $0 + $stdout.sync = true + $stdin.sync = true + main +end + diff --git a/server.sh b/server.sh new file mode 100755 index 0000000..3a1a310 --- /dev/null +++ b/server.sh @@ -0,0 +1,2 @@ +#!/bin/bash +socat TCP-LISTEN:5000,reuseaddr,fork EXEC:./service_agent.rb From d87a19ce85a679058e7eeec9299a5c7b592c9ae4 Mon Sep 17 00:00:00 2001 From: bagushehe Date: Wed, 24 Oct 2018 22:01:38 +0800 Subject: [PATCH 09/26] Upload files to 'perintah_linux' --- perintah_linux/aa.py | 41 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 perintah_linux/aa.py diff --git a/perintah_linux/aa.py b/perintah_linux/aa.py new file mode 100644 index 0000000..ca9c28e --- /dev/null +++ b/perintah_linux/aa.py @@ -0,0 +1,41 @@ +#!/usr/bin/python + +import sys +import os + +class Unbuffered(object): + def __init__(self, stream): + self.stream = stream + def write(self, data): + self.stream.write(data) + self.stream.flush() + def writelines(self, datas): + self.stream.writelines(datas) + self.stream.flush() + def __getattr__(self, attr): + return getattr(self.stream, attr) + +sys.stdout = Unbuffered(sys.stdout) +print" /$$ /$$ /$$$$$$ /$$ /$$$$$$$ /$$ /$$ /$$ /$$" +print" | $$ /$$/ /$$__ $$| $$ | $$__ $$| $$ /$ | $$| $$$ | $$" +print" | $$ /$$/ | $$ \__/| $$ | $$ \ $$| $$ /$$$| $$| $$$$| $$" +print" | $$$$$/ | $$$$$$ | $$ | $$$$$$$/| $$/$$ $$ $$| $$ $$ $$" +print" | $$ $$ \____ $$| $$ | $$____/ | $$$$_ $$$$| $$ $$$$" +print" | $$\ $$ /$$ \ $$| $$ | $$ | $$$/ \ $$$| $$\ $$$" +print" | $$ \ $$| $$$$$$/| $$$$$$$$ | $$ | $$/ \ $$| $$ \ $$" +print" |__/ \__/ \______/ |________/ |__/ |__/ \__/|__/ \__/" +print" Author : Bagus Widhyasmara" +print "<~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>" +print" " +print "clue --> The 3rd answer can be read use indonesian and english language !" +name = raw_input("Masukan nama anda : ") +print("Selamat datang "+name) +while True: + x = raw_input("enter your born place ") + y = input("enter your bornn year ") + z = input("how many letters o on born ? ") + if z == 1: + perlin = raw_input("silahkan ketik perintah linux apapun! ") + os.system(perlin) + exit(0) + From a281096ead2ba954213a13fd5e6356110b981d68 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 24 Oct 2018 23:06:20 +0800 Subject: [PATCH 10/26] baru saja --- service_agent/Dockerfile | 32 ++++++++++++++++++++++++++++ service_agent/chall/service_agent.rb | 27 +++++++++++++++++++++++ service_agent/server.sh | 2 ++ 3 files changed, 61 insertions(+) create mode 100644 service_agent/Dockerfile create mode 100755 service_agent/chall/service_agent.rb create mode 100755 service_agent/server.sh diff --git a/service_agent/Dockerfile b/service_agent/Dockerfile new file mode 100644 index 0000000..e044cfc --- /dev/null +++ b/service_agent/Dockerfile @@ -0,0 +1,32 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken + +# install socat editor ssh +RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev ruby-full -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall #membuat direktory chall +WORKDIR /chall #direktory chall akan digunakan sebagai tempat kerja + +RUN cp /usr/bin/ruby /usr/local/bin/ +RUN echo 'KSL{t3RM1naL_Linux_3azy}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /usr/bin/* /bin/* /dev/shm #memberi hak akses +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python /usr/bin/ruby + + +RUN chown root:ksl /chall/service_agent.rb # ubah nama file +RUN chmod 775 /chall/service_agent.rb # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/service_agent.rb,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/service_agent/chall/service_agent.rb b/service_agent/chall/service_agent.rb new file mode 100755 index 0000000..b10b1a2 --- /dev/null +++ b/service_agent/chall/service_agent.rb @@ -0,0 +1,27 @@ +#!/usr/local/bin/ruby + +def main + puts "================================================================================================================================================================================================" + puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" + puts "================================================================================================================================================================================================" + print "Masukan Kode Rahasia Agen: " + code = gets.chomp + + if code == "KSL_SECRET_TEAM007" then + puts "================================================================================================================================================================================================" + puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" + puts "================================================================================================================================================================================================" + print "Enter Secret Command : " + sc = gets.chomp + system("#{sc}") + else + abort "Maaf Kode yang anda salah!" + end +end + +if __FILE__ == $0 + $stdout.sync = true + $stdin.sync = true + main +end + diff --git a/service_agent/server.sh b/service_agent/server.sh new file mode 100755 index 0000000..3a1a310 --- /dev/null +++ b/service_agent/server.sh @@ -0,0 +1,2 @@ +#!/bin/bash +socat TCP-LISTEN:5000,reuseaddr,fork EXEC:./service_agent.rb From 6441d286aa8074f95fa96503f159d3c5bc900af1 Mon Sep 17 00:00:00 2001 From: bagushehe Date: Wed, 24 Oct 2018 23:16:47 +0800 Subject: [PATCH 11/26] perintah_linux --- perintah_linux/Dockerfile | 31 +++++++++++++++++++++++++++++++ perintah_linux/{ => chall}/aa.py | 0 2 files changed, 31 insertions(+) create mode 100644 perintah_linux/Dockerfile rename perintah_linux/{ => chall}/aa.py (100%) diff --git a/perintah_linux/Dockerfile b/perintah_linux/Dockerfile new file mode 100644 index 0000000..a284339 --- /dev/null +++ b/perintah_linux/Dockerfile @@ -0,0 +1,31 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken + +# install socat editor ssh +RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall +WORKDIR /chall + +RUN echo 'KSL{FEEL_BETTER_USE_LINUX}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /var/tmp /usr/bin/* /bin/* /dev/shm +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python + + +RUN chown root:ksl /chall/aa.py # ubah nama file +RUN chmod 775 /chall/aa.py # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/aa.py,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/perintah_linux/aa.py b/perintah_linux/chall/aa.py similarity index 100% rename from perintah_linux/aa.py rename to perintah_linux/chall/aa.py From e723a65329ab7926f8aba066395d8c8c09368010 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 24 Oct 2018 23:23:03 +0800 Subject: [PATCH 12/26] service_agent --- Dockerfile | 32 -------------------------------- 1 file changed, 32 deletions(-) delete mode 100644 Dockerfile diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index e044cfc..0000000 --- a/Dockerfile +++ /dev/null @@ -1,32 +0,0 @@ -# Use ubuntu 16.04 -FROM ubuntu:16.04 - -RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken - -# install socat editor ssh -RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev ruby-full -y - -RUN adduser --disabled-password --gecos "" ksl -RUN echo "ksl:sebuahrahasiamas" | chpasswd - -ADD chall/. /chall #membuat direktory chall -WORKDIR /chall #direktory chall akan digunakan sebagai tempat kerja - -RUN cp /usr/bin/ruby /usr/local/bin/ -RUN echo 'KSL{t3RM1naL_Linux_3azy}' > /chall/flag.txt # ubah isi flagnya - -# Secure ENV - -RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc -RUN chmod 700 /tmp /usr/bin/* /bin/* /dev/shm #memberi hak akses -RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python /usr/bin/ruby - - -RUN chown root:ksl /chall/service_agent.rb # ubah nama file -RUN chmod 775 /chall/service_agent.rb # ubah nama file - -# Run Service - -RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/service_agent.rb,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh - -CMD ["/var/tmp/.start.sh"] From f46bc06313710a220a587bc794e0e80fc9dcbcf2 Mon Sep 17 00:00:00 2001 From: Candra Date: Wed, 24 Oct 2018 23:30:32 +0800 Subject: [PATCH 13/26] Delete 'server.sh' --- server.sh | 2 -- 1 file changed, 2 deletions(-) delete mode 100755 server.sh diff --git a/server.sh b/server.sh deleted file mode 100755 index 3a1a310..0000000 --- a/server.sh +++ /dev/null @@ -1,2 +0,0 @@ -#!/bin/bash -socat TCP-LISTEN:5000,reuseaddr,fork EXEC:./service_agent.rb From 9d8f7cef05c0bfabc9d5be2726a7bcaeaeed881b Mon Sep 17 00:00:00 2001 From: Candra Date: Wed, 24 Oct 2018 23:30:47 +0800 Subject: [PATCH 14/26] Delete 'Service Agent.rb' --- Service Agent.rb | 20 -------------------- 1 file changed, 20 deletions(-) delete mode 100755 Service Agent.rb diff --git a/Service Agent.rb b/Service Agent.rb deleted file mode 100755 index 6ec0bec..0000000 --- a/Service Agent.rb +++ /dev/null @@ -1,20 +0,0 @@ -#!/usr/bin/ruby - -puts "================================================================================================================================================================================================" -puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" -puts "================================================================================================================================================================================================" -print "Masukan Kode Rahasia Agen: " -code = gets.chomp - -if code == "KSL_SECRET_TEAM007" then - puts "================================================================================================================================================================================================" - puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" - puts "================================================================================================================================================================================================" - print "Enter Secret Command : " - sc = gets.chomp - system("#{sc}") -else - abort "Maaf Kode yang anda salah!" -end - - From dae3bec2419026564856cc3c698282e3ae5ba4b7 Mon Sep 17 00:00:00 2001 From: Candra Date: Wed, 24 Oct 2018 23:31:48 +0800 Subject: [PATCH 15/26] Delete 'chall/service_agent.rb' --- chall/service_agent.rb | 27 --------------------------- 1 file changed, 27 deletions(-) delete mode 100755 chall/service_agent.rb diff --git a/chall/service_agent.rb b/chall/service_agent.rb deleted file mode 100755 index b10b1a2..0000000 --- a/chall/service_agent.rb +++ /dev/null @@ -1,27 +0,0 @@ -#!/usr/local/bin/ruby - -def main - puts "================================================================================================================================================================================================" - puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" - puts "================================================================================================================================================================================================" - print "Masukan Kode Rahasia Agen: " - code = gets.chomp - - if code == "KSL_SECRET_TEAM007" then - puts "================================================================================================================================================================================================" - puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" - puts "================================================================================================================================================================================================" - print "Enter Secret Command : " - sc = gets.chomp - system("#{sc}") - else - abort "Maaf Kode yang anda salah!" - end -end - -if __FILE__ == $0 - $stdout.sync = true - $stdin.sync = true - main -end - From 96a6b1c5f1ae046ad781bd9ad239b9ee261508cb Mon Sep 17 00:00:00 2001 From: Candra Date: Thu, 25 Oct 2018 16:17:41 +0800 Subject: [PATCH 16/26] Delete 'Perintah linux/aa.py' --- Perintah linux/aa.py | 44 -------------------------------------------- 1 file changed, 44 deletions(-) delete mode 100644 Perintah linux/aa.py diff --git a/Perintah linux/aa.py b/Perintah linux/aa.py deleted file mode 100644 index 246f346..0000000 --- a/Perintah linux/aa.py +++ /dev/null @@ -1,44 +0,0 @@ -#!/usr/bin/python - -import sys -import os - -class Unbuffered(object): - def __init__(self, stream): - self.stream = stream - def write(self, data): - self.stream.write(data) - self.stream.flush() - def writelines(self, datas): - self.stream.writelines(datas) - self.stream.flush() - def __getattr__(self, attr): - return getattr(self.stream, attr) - -sys.stdout = Unbuffered(sys.stdout) -print" /$$ /$$ /$$$$$$ /$$ /$$$$$$$ /$$ /$$ /$$ /$$" -print" | $$ /$$/ /$$__ $$| $$ | $$__ $$| $$ /$ | $$| $$$ | $$" -print" | $$ /$$/ | $$ \__/| $$ | $$ \ $$| $$ /$$$| $$| $$$$| $$" -print" | $$$$$/ | $$$$$$ | $$ | $$$$$$$/| $$/$$ $$ $$| $$ $$ $$" -print" | $$ $$ \____ $$| $$ | $$____/ | $$$$_ $$$$| $$ $$$$" -print" | $$\ $$ /$$ \ $$| $$ | $$ | $$$/ \ $$$| $$\ $$$" -print" | $$ \ $$| $$$$$$/| $$$$$$$$ | $$ | $$/ \ $$| $$ \ $$" -print" |__/ \__/ \______/ |________/ |__/ |__/ \__/|__/ \__/" -print" Author : Bagus Widhyasmara" -print "<~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>" -print" " -print "clue --> The 3rd answer can be read use indonesian and english language !" - -flag1 = "{flag=you_are_jenius}" - -while True: - x = raw_input("enter your born place ") - y = input("enter your bornn year ") - z = input("how many letters o on born ? ") - if z == 1: - perlin = raw_input("silahkan ketik perintah linux apapun! ") - os.system(perlin) - print "Here ya go! ", flag1 - exit(0) - else: - print "{fIa9=YOU_VERY_STUPID_!!!}" From a9e323dd472953d8db2d3d349fa5b2d2316fc3ac Mon Sep 17 00:00:00 2001 From: Candra Date: Thu, 25 Oct 2018 16:17:52 +0800 Subject: [PATCH 17/26] Delete 'Perintah linux/aaa.py' --- Perintah linux/aaa.py | 36 ------------------------------------ 1 file changed, 36 deletions(-) delete mode 100644 Perintah linux/aaa.py diff --git a/Perintah linux/aaa.py b/Perintah linux/aaa.py deleted file mode 100644 index cdd8eb3..0000000 --- a/Perintah linux/aaa.py +++ /dev/null @@ -1,36 +0,0 @@ -#!/usr/bin/python - -import sys -import os - -class Unbuffered(object): - def __init__(self, stream): - self.stream = stream - def write(self, data): - self.stream.write(data) - self.stream.flush() - def writelines(self, datas): - self.stream.writelines(datas) - self.stream.flush() - def __getattr__(self, attr): - return getattr(self.stream, attr) - -sys.stdout = Unbuffered(sys.stdout) -print" /$$ /$$ /$$$$$$ /$$ /$$$$$$$ /$$ /$$ /$$ /$$" -print" | $$ /$$/ /$$__ $$| $$ | $$__ $$| $$ /$ | $$| $$$ | $$" -print" | $$ /$$/ | $$ \__/| $$ | $$ \ $$| $$ /$$$| $$| $$$$| $$" -print" | $$$$$/ | $$$$$$ | $$ | $$$$$$$/| $$/$$ $$ $$| $$ $$ $$" -print" | $$ $$ \____ $$| $$ | $$____/ | $$$$_ $$$$| $$ $$$$" -print" | $$\ $$ /$$ \ $$| $$ | $$ | $$$/ \ $$$| $$\ $$$" -print" | $$ \ $$| $$$$$$/| $$$$$$$$ | $$ | $$/ \ $$| $$ \ $$" -print" |__/ \__/ \______/ |________/ |__/ |__/ \__/|__/ \__/" -print" Author : Bagus Widhyasmara" -print "<~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>" -print" " -name = raw_input("Masukan nama anda : ") -print("Selamat datang "+name) -perlin = raw_input("silahkan ketik perintah linux apapun! ") -os.system(perlin) -print("{flag=you_get_the_flag}") - - From 2f254c4b3a816b77f03761c68d51fd5e1e3d4a07 Mon Sep 17 00:00:00 2001 From: Candra Date: Thu, 25 Oct 2018 16:44:23 +0800 Subject: [PATCH 18/26] Delete 'Service Agent/Service Agent.rb' --- Service Agent/Service Agent.rb | 20 -------------------- 1 file changed, 20 deletions(-) delete mode 100755 Service Agent/Service Agent.rb diff --git a/Service Agent/Service Agent.rb b/Service Agent/Service Agent.rb deleted file mode 100755 index 6ec0bec..0000000 --- a/Service Agent/Service Agent.rb +++ /dev/null @@ -1,20 +0,0 @@ -#!/usr/bin/ruby - -puts "================================================================================================================================================================================================" -puts "=============================================================================SELAMAT DATANG DI PORTAL RAHASIA===================================================================================" -puts "================================================================================================================================================================================================" -print "Masukan Kode Rahasia Agen: " -code = gets.chomp - -if code == "KSL_SECRET_TEAM007" then - puts "================================================================================================================================================================================================" - puts "==========================================================Selamat datang agen KSL, ini adalah sesi control panel anda. Gunakan dengan bijak!====================================================" - puts "================================================================================================================================================================================================" - print "Enter Secret Command : " - sc = gets.chomp - system("#{sc}") -else - abort "Maaf Kode yang anda salah!" -end - - From 105cc4b30d432cb3ed68b125f3f280cd78fc037b Mon Sep 17 00:00:00 2001 From: bagushehe Date: Fri, 26 Oct 2018 10:02:25 +0800 Subject: [PATCH 19/26] Delete 'perintah_linux/Dockerfile' --- perintah_linux/Dockerfile | 31 ------------------------------- 1 file changed, 31 deletions(-) delete mode 100644 perintah_linux/Dockerfile diff --git a/perintah_linux/Dockerfile b/perintah_linux/Dockerfile deleted file mode 100644 index a284339..0000000 --- a/perintah_linux/Dockerfile +++ /dev/null @@ -1,31 +0,0 @@ -# Use ubuntu 16.04 -FROM ubuntu:16.04 - -RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken - -# install socat editor ssh -RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y - -RUN adduser --disabled-password --gecos "" ksl -RUN echo "ksl:sebuahrahasiamas" | chpasswd - -ADD chall/. /chall -WORKDIR /chall - -RUN echo 'KSL{FEEL_BETTER_USE_LINUX}' > /chall/flag.txt # ubah isi flagnya - -# Secure ENV - -RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc -RUN chmod 700 /tmp /var/tmp /usr/bin/* /bin/* /dev/shm -RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python - - -RUN chown root:ksl /chall/aa.py # ubah nama file -RUN chmod 775 /chall/aa.py # ubah nama file - -# Run Service - -RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/aa.py,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh - -CMD ["/var/tmp/.start.sh"] From bf5155eecb0dc91dc3d208b5ba50ceeb12e760e5 Mon Sep 17 00:00:00 2001 From: bagushehe Date: Fri, 26 Oct 2018 10:05:31 +0800 Subject: [PATCH 20/26] Delete 'perintah_linux/chall/aa.py' --- perintah_linux/chall/aa.py | 41 -------------------------------------- 1 file changed, 41 deletions(-) delete mode 100644 perintah_linux/chall/aa.py diff --git a/perintah_linux/chall/aa.py b/perintah_linux/chall/aa.py deleted file mode 100644 index ca9c28e..0000000 --- a/perintah_linux/chall/aa.py +++ /dev/null @@ -1,41 +0,0 @@ -#!/usr/bin/python - -import sys -import os - -class Unbuffered(object): - def __init__(self, stream): - self.stream = stream - def write(self, data): - self.stream.write(data) - self.stream.flush() - def writelines(self, datas): - self.stream.writelines(datas) - self.stream.flush() - def __getattr__(self, attr): - return getattr(self.stream, attr) - -sys.stdout = Unbuffered(sys.stdout) -print" /$$ /$$ /$$$$$$ /$$ /$$$$$$$ /$$ /$$ /$$ /$$" -print" | $$ /$$/ /$$__ $$| $$ | $$__ $$| $$ /$ | $$| $$$ | $$" -print" | $$ /$$/ | $$ \__/| $$ | $$ \ $$| $$ /$$$| $$| $$$$| $$" -print" | $$$$$/ | $$$$$$ | $$ | $$$$$$$/| $$/$$ $$ $$| $$ $$ $$" -print" | $$ $$ \____ $$| $$ | $$____/ | $$$$_ $$$$| $$ $$$$" -print" | $$\ $$ /$$ \ $$| $$ | $$ | $$$/ \ $$$| $$\ $$$" -print" | $$ \ $$| $$$$$$/| $$$$$$$$ | $$ | $$/ \ $$| $$ \ $$" -print" |__/ \__/ \______/ |________/ |__/ |__/ \__/|__/ \__/" -print" Author : Bagus Widhyasmara" -print "<~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>" -print" " -print "clue --> The 3rd answer can be read use indonesian and english language !" -name = raw_input("Masukan nama anda : ") -print("Selamat datang "+name) -while True: - x = raw_input("enter your born place ") - y = input("enter your bornn year ") - z = input("how many letters o on born ? ") - if z == 1: - perlin = raw_input("silahkan ketik perintah linux apapun! ") - os.system(perlin) - exit(0) - From e776e810c16e0078088126775d4a2deb31ea6899 Mon Sep 17 00:00:00 2001 From: bagushehe Date: Fri, 26 Oct 2018 10:07:15 +0800 Subject: [PATCH 21/26] Upload files to 'perintah_linux' --- perintah_linux/perintah_linux.py | 41 ++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 perintah_linux/perintah_linux.py diff --git a/perintah_linux/perintah_linux.py b/perintah_linux/perintah_linux.py new file mode 100644 index 0000000..da73089 --- /dev/null +++ b/perintah_linux/perintah_linux.py @@ -0,0 +1,41 @@ +#!/usr/bin/python + +import sys +import os + +class Unbuffered(object): + def __init__(self, stream): + self.stream = stream + def write(self, data): + self.stream.write(data) + self.stream.flush() + def writelines(self, datas): + self.stream.writelines(datas) + self.stream.flush() + def __getattr__(self, attr): + return getattr(self.stream, attr) + +sys.stdout = Unbuffered(sys.stdout) +print" /$$ /$$ /$$$$$$ /$$ /$$$$$$$ /$$ /$$ /$$ /$$" +print" | $$ /$$/ /$$__ $$| $$ | $$__ $$| $$ /$ | $$| $$$ | $$" +print" | $$ /$$/ | $$ \__/| $$ | $$ \ $$| $$ /$$$| $$| $$$$| $$" +print" | $$$$$/ | $$$$$$ | $$ | $$$$$$$/| $$/$$ $$ $$| $$ $$ $$" +print" | $$ $$ \____ $$| $$ | $$____/ | $$$$_ $$$$| $$ $$$$" +print" | $$\ $$ /$$ \ $$| $$ | $$ | $$$/ \ $$$| $$\ $$$" +print" | $$ \ $$| $$$$$$/| $$$$$$$$ | $$ | $$/ \ $$| $$ \ $$" +print" |__/ \__/ \______/ |________/ |__/ |__/ \__/|__/ \__/" +print" Author : Bagus Widhyasmara" +print "<~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>" +print" " +print "clue --> The 3rd answer can be read use indonesian and english language !" +print" " +name = raw_input("Masukan nama anda : ") +print("Selamat datang "+name) +while True: + x = raw_input("enter your born place ") + y = input("enter your born year ") + z = input("how many letters 'o' on born ? ") + if z == 1: + perlin = raw_input("silahkan ketik perintah linux apapun! ") + os.system(perlin) + From 896681a82aa9ec3933bf8e14bcee6630c1f2daa1 Mon Sep 17 00:00:00 2001 From: bagushehe Date: Fri, 26 Oct 2018 10:12:48 +0800 Subject: [PATCH 22/26] perintah_linux --- perintah_linux/Dockerfile | 31 ++++++++++++++++++++ perintah_linux/{ => chall}/perintah_linux.py | 0 2 files changed, 31 insertions(+) create mode 100644 perintah_linux/Dockerfile rename perintah_linux/{ => chall}/perintah_linux.py (100%) diff --git a/perintah_linux/Dockerfile b/perintah_linux/Dockerfile new file mode 100644 index 0000000..ef066b3 --- /dev/null +++ b/perintah_linux/Dockerfile @@ -0,0 +1,31 @@ +# Use ubuntu 16.04 +FROM ubuntu:16.04 + +RUN apt-get update && apt-get -y dist-upgrade --fix-missing --fix-broken + +# install socat editor ssh +RUN apt-get install curl netcat-openbsd vim nano openssh-server socat lib32ncurses5 python python-pip python-dev -y + +RUN adduser --disabled-password --gecos "" ksl +RUN echo "ksl:sebuahrahasiamas" | chpasswd + +ADD chall/. /chall +WORKDIR /chall + +RUN echo 'KSL{FEEL_BETTER_USE_LINUX}' > /chall/flag.txt # ubah isi flagnya + +# Secure ENV + +RUN echo 'alias kill="echo no kill please!"' >> ~/.bashrc +RUN chmod 700 /tmp /var/tmp /usr/bin/* /bin/* /dev/shm +RUN chmod 755 /usr/bin/env /bin/dash /bin/bash /bin/sh /bin/nc /bin/cat /usr/bin/curl /usr/bin/groups /usr/bin/id /bin/ls /usr/bin/python + + +RUN chown root:ksl /chall/perintah_linux.py # ubah nama file +RUN chmod 775 /chall/perintah_linux.py # ubah nama file + +# Run Service + +RUN echo '#!/bin/bash'"\n(socat TCP-LISTEN:7000,reuseaddr,fork EXEC:"/chall/perintah_linux.py,su=nobody")" > /var/tmp/.start.sh && chmod +x /var/tmp/.start.sh + +CMD ["/var/tmp/.start.sh"] diff --git a/perintah_linux/perintah_linux.py b/perintah_linux/chall/perintah_linux.py similarity index 100% rename from perintah_linux/perintah_linux.py rename to perintah_linux/chall/perintah_linux.py From 1f22c28efc9d55c7f2091bd50abbc2842d3111f9 Mon Sep 17 00:00:00 2001 From: asas Date: Fri, 2 Nov 2018 22:25:00 +0800 Subject: [PATCH 23/26] Update 'README.md' Add list of port for every challenges. --- README.md | 29 ++++++++++++++++++++++++++++- 1 file changed, 28 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 2fd2a44..3bf1664 100644 --- a/README.md +++ b/README.md @@ -1 +1,28 @@ -Kumpulan Soal PWN KSL untuk seleksi mahasiswa baru KSL 2018 \ No newline at end of file +Kumpulan Soal PWN KSL untuk seleksi mahasiswa baru KSL 2018 + +Berikut merupakan list port yang digunakan untuk masing-masing soal pada saat proses deployment pada VPS 103.200.7.150: + +Chall: +1. Kepala + --> 30101 + +2. calc-pwn + --> 30201 + +3. ku-ingin-lompat-sambil-jumping + --> 30301 + +4. ku-ingin-melompat + --> 30401 + +5. perintah_linux + --> 30501 + +6. ping-service + --> 30401 + +7. service-diary + --> 30501 + +8. service_agent + --> 30601 \ No newline at end of file From b29e02982fd3c9f56387114a424f6fb5f8607832 Mon Sep 17 00:00:00 2001 From: asas Date: Fri, 2 Nov 2018 22:47:27 +0800 Subject: [PATCH 24/26] Update 'README.md' Add additional information about deployment work space and directory hierarchy --- README.md | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 3bf1664..c873d07 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,22 @@ Kumpulan Soal PWN KSL untuk seleksi mahasiswa baru KSL 2018 -Berikut merupakan list port yang digunakan untuk masing-masing soal pada saat proses deployment pada VPS 103.200.7.150: +Berikut merupakan list port yang digunakan untuk masing-masing soal pada saat proses deployment di VPS 103.200.7.150. +Workspace Directory : /home/soal/KSL_SELEKSI_MABA2018 + +Buatlah folder baru sesuai dengan nama challenge yang kalian buat. +example directory hierarchy: + +--home +----soal +------KSL_SELEKSI_MABA2018 +--------Kepala +---------Dockerfile +---------chall +---------etc.. + Chall: + 1. Kepala --> 30101 From 6636aeddced9e9fe3c38bffed0621c5d07ff92ab Mon Sep 17 00:00:00 2001 From: asas Date: Fri, 2 Nov 2018 22:57:35 +0800 Subject: [PATCH 25/26] Newest update 'README.md' Add additional information about the deployment work space and directory hierarchy --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index c873d07..3505190 100644 --- a/README.md +++ b/README.md @@ -30,13 +30,13 @@ Chall: --> 30401 5. perintah_linux - --> 30501 + --> 30502 6. ping-service - --> 30401 + --> 30602 7. service-diary - --> 30501 + --> 30702 8. service_agent - --> 30601 \ No newline at end of file + --> 30802 \ No newline at end of file From 4a39b50fb0607325c28037dbabdae36a1e2f584b Mon Sep 17 00:00:00 2001 From: asas Date: Fri, 2 Nov 2018 23:13:42 +0800 Subject: [PATCH 26/26] Newest update 'README.md' Add additional information about deployment work space and directory hierarchy --- README.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index 3505190..21491d2 100644 --- a/README.md +++ b/README.md @@ -7,13 +7,11 @@ Workspace Directory : /home/soal/KSL_SELEKSI_MABA2018 Buatlah folder baru sesuai dengan nama challenge yang kalian buat. example directory hierarchy: ---home -----soal -------KSL_SELEKSI_MABA2018 ---------Kepala ----------Dockerfile ----------chall ----------etc.. +--KSL_SELEKSI_MABA2018 +----Kepala +------Dockerfile +------chall +------etc.. Chall: