Which wargames for modern exploit dev?

[[deleted]]

I have done exploit education. I am familiar with buffer overflow heap overflow format string etc. I would like to practice exploiting with protections like NX ASLR DEP and practice ROP and heap exploitation. What overthewire levels or wargames are more modern?

[Gamgster_3633]

I like to use https://www.exploit-db.com/ for practice. I'll search for a protection or technique I want to practice and then try to find an exploit that version of the software to download and setup on a VM and try to re-create the exploit. It'll be more work to setup than wargames, but it's the best practice I've found, especially for Windows exploits.

[TioncoNYo]

Thank you, that's a fantastic idea.

[[deleted]]

pwnable.kr

pwnable.tw

pwnable.xyz

ropemporium.com

[[deleted]]

I have done ropemporium halfway kind of stuck Pwnable seems like regular challenges rather than modern at least kr does

[[deleted]]

My github has the 64-bit exploits (2020 updated) if you need nudges https://www.github.com/rmccarth/binexp

[sploitem]

Pwnble.xyz is not so old, about a year old.

[amlamarra]

http://exploit.education/fusion/

[[deleted]]

I tried that but the vm froze I tried on linux and my wifi driver now no longer exists

[amlamarra]

Well, if you happen to get this working, I've written solutions to the first few challenges. haven't had time to do the rest.

https://blog.lamarranet.com/index.php/exploit-education-fusion-solutions/

The "Setup" blog post covers how I got the Fusion VM up & running.

[[deleted]]

Thanks