challenge.yaml

name: hashbrown
author: FizzBuzz101
description: |-
  Who doesn't like hashbrowns? I like them so much that I wrote a driver named after them! But apparently programming is hard and I might have made a mistake...

  Please note that the following measures are active (whether they are important to the exploit process is up to you):
  ```
  CONFIG_SLAB_FREELIST_RANDOM=y
  CONFIG_SLAB=y
  CONFIG_FG_KASLR=y
  ```
  SMAP, SMEP, and KPTI are enabled as well.

  `{{nc}}`

  Note: only one connection per IP is allowed, and there is a 10 minute wall-clock time limit from the moment you connect. Test locally!

provide:
  - ./bzImage
  - ./run.sh
  - ./distributed/initramfs.cpio
  - ./distributed/hashbrown_distributed.c

flag: dice{h@$hM@p_r3s1z1ng_r@c3_c0nd1t1on_w1tH_sm3p_sm@p_kPt1_&_fGK@sLR}

# FIXME: move host
#deployed: false

containers:
  main:
    build: .
    ports:
    - 5000
    environment:
      HASHCASH_BITS: '26'
    securityContext:
      readOnlyRootFilesystem: true
      capabilities:
        drop:
          - all
        add:
          - chown
          - setuid
          - setgid
          - sys_admin
          - setpcap
      seccompProfile: jail-qemu.json
    k8s:
      deployment:
        annotations:
          container.apparmor.security.beta.kubernetes.io/main: unconfined
expose:
  main:
  - target: 5000
    tcp: 31691