22018, 1/1101 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   select
   setUID vs °èÁ¤ ±ÇÇÑ

http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=33485 [º¹»ç]



¸®´ª½º¿¡ ´ëÇØ¼­ Àß ¸ô¶ó¼­ ±×·¯´Âµ¥
setUID Àº Àá±ñµ¿¾È ½ÇÇà¿¡ ´ëÇÑ ±ÇÇÑÀ» Áִ°ŠÀݾƿä??
±Ùµ¥ À̰Ŷû °èÁ¤¿¡ ½ÇÇà(x) ±ÇÇÑ Áִ°Ŷû ¹¹°¡ ´Ù¸¥°¡¿ä???

°á±¹ ½ÇÇà Çϴϱñ ¶È°°Àº°Å ¾Æ´Ñ°¡¿ä??
¾Æ´Ï¸é ÁÖ´Â ±ÇÇÑÀÌ ´Ù¸¥°¡¿ä??

¸®´ª½º´Â óÀ½À̶ó
´äº¯ ºÎŹ µå¸³´Ï´Ù..

  Hit : 4815     Date : 2015/09/20 07:04



    
cd80 ±×³É ½ÇÇà±ÇÇÑÀ» ÁÖ¸é ÇöÀç Á¢¼ÓµÅÀÖ´Â °èÁ¤ÀÇ ±ÇÇÑÀ¸·Î ÇÁ·Î¼¼½º°¡ ½ÇÇàµÇ°í
setuid¸¦ °É¾îÁÖ¸é setuid°¡ ¼³Á¤µÈ °èÁ¤ÀÇ uid·Î ÀüȯµÅ¼­ ½ÇÇàµË´Ï´Ù
¿¹¸¦µé¾î /usr/bin/whoami ¿¡
chown root:root /usr/bin/whoami
chmod 6755 /usr/bin/whoami
¸¦ Çϰí whoami ¸í·ÉÀ» Ã常é
¾î¶² °èÁ¤¿¡¼­ whoami¸í·ÉÀ» Ä¡µç°£¿¡
root ¶ó°í Ãâ·ÂµË´Ï´Ù
2015/09/21