All docker containers should be final. Ready for building by the participants.

Author: nnamon

README.md

@@ -0,0 +1,6 @@
+all: 1_vulnerable
+
+1_vulnerable:
+	gcc -m32 -fno-stack-protector -znoexecstack -o ./build/1_vulnerable ./src/1_vulnerable.c
+
+

lessons/11_memory_leaks/lessonplan.md

@@ -0,0 +1,12 @@
+#include <unistd.h>
+#include <stdio.h>
+
+void vuln() {
+    char buffer[16];
+    read(0, buffer, 100);
+    write(1, buffer, 16);
+}
+
+int main() {
+    vuln();
+}

lessons/12_multi_stage/Makefile

@@ -0,0 +1,7 @@
+all: 3_echo
+
+3_echo:
+	gcc -m32 -znoexecstack -o ./build/3_echo ./src/3_echo.c
+	cp ./build/3_echo ./services/echo/echo
+
+

lessons/12_multi_stage/build/1_vulnerable

@@ -0,0 +1,17 @@
+FROM ubuntu:latest
+ENV user=echo
+RUN dpkg --add-architecture i386
+RUN sed -i -e 's/archive\.ubuntu\.com/mirror\.0x\.sg/g' /etc/apt/sources.list
+RUN apt-get update
+RUN apt-get install -y xinetd libc6:i386 libncurses5:i386 libstdc++6:i386
+RUN useradd -m $user
+RUN echo "$user     hard    nproc       20" >> /etc/security/limits.conf
+COPY ./echo /home/$user/echo
+COPY ./echoservice /etc/xinetd.d/echoservice
+COPY ./flag /home/$user/flag
+RUN chown -R root:$user /home/$user
+RUN chmod -R 750 /home/$user
+RUN chown root:$user /home/$user/flag
+RUN chmod 440 /home/$user/flag
+EXPOSE 31337
+CMD ["/usr/sbin/xinetd", "-d"]

lessons/12_multi_stage/lessonplan.md

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+docker build -t echoes .

lessons/12_multi_stage/src/1_vulnerable.c

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+docker run -dt -p 1904:31337 echoes

lessons/13_fmt_str/Makefile

@@ -0,0 +1,12 @@
+service echoservice
+{
+    disable = no
+    socket_type = stream
+    protocol    = tcp
+    wait        = no
+    user        = echo
+    bind        = 0.0.0.0
+    server      = /home/echo/echo
+    type        = UNLISTED
+    port        = 31337
+}

lessons/13_fmt_str/build/3_echo

@@ -0,0 +1 @@
+flag{h1_1m_p0ppy}

lessons/13_fmt_str/services/echo/Dockerfile

@@ -0,0 +1,21 @@
+#include <stdlib.h>
+#include <stdio.h>
+#include <unistd.h>
+
+int main() {
+    setvbuf(stdin, NULL, _IONBF, 0);
+    setvbuf(stdout, NULL, _IONBF, 0);
+    char echoed[1000] = {0};
+    char number[200];
+    int times;
+    int i;
+    while (1) {
+        read(0, echoed, 999);
+        puts("How many times do you want it echoed?");
+        scanf("%199s", number);
+        times = atoi(number);
+        for (i = 0; i < times; i++) {
+            printf(echoed);
+        }
+    }
+}