diff --git a/README.md b/README.md index 46027d0..6ef9f83 100644 --- a/README.md +++ b/README.md @@ -3,9 +3,13 @@ AleJndFlag `AleJndFlag` is a "flag puller" used to get the flag from the scoreboard server. The flag returns is differ based on the entrypoints used by the attacker. -Example: +Single flag mode: -![alt text](get_flag.png) +![alt text](get_multi_flag.png) + +Multi flag mode: + +![alt text](get_single_flag.png) #### Usage @@ -14,7 +18,19 @@ Install the dependencies *NOTE* : Make sure to set the `INTERFACE` in file `get_flag.cpp` to the configured interface name. ```Bash -$ sudo apt-get install libssl-dev -$ make +$ sudo apt-get install libjsoncpp-dev libcurl4-openssl-dev libssl-dev +$ make single - for single flag mode $ ./get_flag ``` + +For multi flag mode, make sure to define the vulnerable service SUID inside the `service_info` structure in `include/services.h`. + +```C++ +struct services_info service[] = +{ + {1000}, + {1001} +}; +``` + +Then update the `FLAGSUBMIT_URL` in `get_flag.cpp`. \ No newline at end of file diff --git a/get_flag.png b/get_multi_flag.png similarity index 100% rename from get_flag.png rename to get_multi_flag.png diff --git a/get_single_flag.png b/get_single_flag.png new file mode 100644 index 0000000..92b7431 Binary files /dev/null and b/get_single_flag.png differ