Red team binary vault jakub - #3
Merged
Merged
Conversation
…ges Jakub - Ajout du challenge Red Team 3 « VAULT-9 » (reverse XOR + exploitation binaire ret2win, niveau intermédiaire) : Dockerfile/socat, source du binaire, générateur de secrets, guides joueur/admin, solution + exploit pwntools testé, template de rapport. - Renommage cohérent (préfixe numéroté par équipe) : Blue-Team-Memory-Forensics -> 2-Blue-Team-Memory-Forensics nouveau -> 3-Red-Team-Binary-Vault Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
…on en conteneur - Marque le challenge validé bout-en-bout en conteneur (build OK, 2 flags). - Documente les pièges de déploiement : Compose v1/v2 (nom docker-compose sur Kali/Debian), droits Docker (sudo si hors groupe docker), méthode build/run sans Compose. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
…e guide joueur Le guide recommandait le vrai Volatility 3 (vol.py) et strings système, or : - le dump est un format pédagogique maison que le vrai Volatility ne lit pas - le flag est encodé et n'apparaît pas via un strings classique Le guide pointe désormais vers l'outil fourni tools/vol_analyzer.py (mini- Volatility) avec la syntaxe et les commandes windows.* réellement disponibles. Vérifié en local : chemin d'analyse complet -> validateur 100/100. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
Note
Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.
Adds the new Red Team 3 “VAULT-9” challenge (dockerized service + docs + solution), and updates Blue Team Memory Forensics documentation/paths to reflect a 2-... naming convention.
Changes:
- Added a complete “VAULT-9” pwn challenge: source, Docker deployment, user/admin docs, solution + exploit, and report template.
- Updated Blue Team Memory Forensics docs to reference a
2-Blue-Team-Memory-Forensicsdirectory layout and replaced the user guide accordingly. - Added ignore rules to prevent generated artifacts and spoilers from being committed/built into the image context.
Reviewed changes
Copilot reviewed 17 out of 30 changed files in this pull request and generated 5 comments.
Show a summary per file
| File | Description |
|---|---|
| challenges/Blue-Team-Memory-Forensics/docs/USER_GUIDE.md | Removed the old user guide from the original directory. |
| challenges/Blue-Team-Memory-Forensics/docs/ADMIN_DEPLOYMENT.md | Updates build path instructions to reference challenges/2-Blue-Team-Memory-Forensics. |
| challenges/Blue-Team-Memory-Forensics/README.md | Updates displayed structure root name to 2-Blue-Team-Memory-Forensics/. |
| challenges/2-Blue-Team-Memory-Forensics/docs/USER_GUIDE.md | Adds the new Blue Team user guide emphasizing the custom analyzer tool. |
| challenges/3-Red-Team-Binary-Vault/challenge/vault.c | Adds the vulnerable VAULT-9 service binary source (reverse + ret2win). |
| challenges/3-Red-Team-Binary-Vault/Dockerfile | Adds container build that generates secrets and compiles the binary. |
| challenges/3-Red-Team-Binary-Vault/docker-entrypoint.sh | Adds socat-based TCP service entrypoint. |
| challenges/3-Red-Team-Binary-Vault/docker-compose.yml | Adds local compose for testing the service. |
| challenges/3-Red-Team-Binary-Vault/docs/USER_GUIDE.md | Adds player-facing guide for the VAULT-9 challenge. |
| challenges/3-Red-Team-Binary-Vault/docs/ADMIN_DEPLOYMENT.md | Adds admin deployment/runbook for CTFd container plugin usage. |
| challenges/3-Red-Team-Binary-Vault/solution/exploit.py | Adds the reference exploit (pwntools) for both flags. |
| challenges/3-Red-Team-Binary-Vault/solution/SOLUTION.md | Adds spoiler solution writeup (reverse + ret2win). |
| challenges/3-Red-Team-Binary-Vault/setup/gen_secret.py | Adds build-time generator for secret header and runtime flags. |
| challenges/3-Red-Team-Binary-Vault/report/report_template.md | Adds a report template for participants. |
| challenges/3-Red-Team-Binary-Vault/README.md | Adds top-level documentation index and quick build instructions. |
| challenges/3-Red-Team-Binary-Vault/.gitignore | Ignores generated artifacts (secret.h, flags, binary). |
| challenges/3-Red-Team-Binary-Vault/.dockerignore | Excludes docs/solutions/report from Docker build context. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+69
to
+74
| char buf[64]; | ||
| puts(""); | ||
| puts("=== Terminal de maintenance ==="); | ||
| printf("Commande > "); | ||
| read(0, buf, 200); | ||
| printf("Commande '%s' non reconnue.\n", buf); |
|
|
||
| # Genere secret.h + flags, compile, installe dans /challenge. | ||
| RUN python3 gen_secret.py && \ | ||
| gcc -fno-stack-protector -no-pie -fno-pie -O0 -w -o vault vault.c && \ |
|
|
||
| ```bash | ||
| cd challenges/3-Red-Team-Binary-Vault | ||
| docker-compose up --build -d # ou : docker compose up --build -d (plugin v2) |
| Arrêt : | ||
|
|
||
| ```bash | ||
| docker compose down |
| services: | ||
| vault: | ||
| build: . | ||
| container_name: rt3-vault |
Jacob-dot-bit
added a commit
that referenced
this pull request
Jul 20, 2026
Red team binary vault jakub
Jacob-dot-bit
added a commit
that referenced
this pull request
Jul 20, 2026
Red team binary vault jakub
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.