214, 7/11 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   31337ÇØÄ¿½º
   ftz level5 --> level6¿¡¼­¿ä

http://www.hackerschool.org/HS_Boards/zboard.php?id=QNA_Web&no=157 [º¹»ç]


level5.tmp´Â /tmp µð·ºÅ丮¿¡ À־ . ¸¸¾à¿¡ level5.tmp¸¦ level5 À¯Àú°¡ °°Àº ÆÄÀÏÀ» ¸ÕÀú ¸¸µé¸é ±×°ÍÀ» level6(/usr/bin/level5) À¯ÀúÀÇ ÇÁ·Î±×·¥À» ½ÇÇàÇÏ¸é ¾î¶»°Ô level5.tmp°¡ Áö¿öÁú¼ö ÀÖÁö¿ä. ±×°Ç sticky bit°¡ °É¸° µð·ºÅ丮 Ư¼º¿¡ ¸ÂÁö ¾ÊÁú ¾Ê³ª¿ä?? ¼Ò½º¿¡´Â remove() ÇÔ¼ö°¡ »ç¿ëµÈ´Ù°í Çϴµ¥. À̰͵µ ´Ù¸¥ »ç¿ëÀÚ ÆÄÀÏÀ» Áö¿ï¼ö´Â ¾øÁö ¾Ê³ª¿ä?? ³»¿ëÀÌ È¤½Ã ÀÌÇØ°¡ µÇ½Ã´Â Áö. ¹°·Ð ¼ÒÇÁÆ® ¸µÅ© ½Ãµµ ÇÏ¸é ´äÀº ³ª¿ÀÁö¸¸ ÀÌ»óÇÏ°Ô level5 ¼ÒÀ¯ÀÇ level5. tmp °¡ »ç¶óÁö´Â Áö ÀÌÇØ°¡ ¾ÈµÇ¾î¼­¿ä. ÀÌ°ÍÀÇ ¼ÒÀ¯°¡ level 6 ·Î º¯°æÀÌ µÇ³ª¿ä?? (/usr/bin/level5) ½ÇÇàÈÄ¿¡.. fd() and write() ÇÔ¼ö ¸¦ ÀÌÇØÇØ¾ß Çϳª¿ä??

°í¼ö´Ôµé ´äÁ».. °¨»çÇÕ´Ï´Ù.

  Hit : 3281     Date : 2013/08/10 01:31



    
Chris Ruiel ¿¡...´äº¯µå¸±²²¿ä

level5->6À¸·Î °¡´Â¹®Á¦°¡..level6ÀÇ setuid¸¦ °¡Áö°íÀÖ´Â ÇÁ·Î±×·¥ ÀÌÁö¿ä...
Áï..level5°¡ ½ÇÇàÀ» ÇÏ°Ô µÇ´õ¶óµµ.. ÇÁ·Î±×·¥ÀÌ ½ÇÇàÀÌ µÉ¶§¿¡´Â level6ÀÇ ±ÇÇÑÀ» °®°Ô µÈ´ä´Ï´Ù.
¸»¾¸ÇϽŴë·Î ½ºÆ¼Å°ºñÆ®°¡ Àû¿ëÀÌ µÆÀ»¶§ level6ÇÁ·Î±×·¥À» ½ÇÇà½ÃÄѵµ level5ÀDZÇÇÑÀÌ À¯ÁöµÈ´Ù¸é..
¿À·ù°ÚÁö¸¸ setuidÀÇ Æ¯¼ºÀ¸·Î ÀÎÇؼ­ ¹®Á¦°¡ ¾ø´ä´Ï´Ù.
2013/10/05  
94   htmlÄڵ带 Çí½º·Î º¯È¯ÇØ ½ÇÇàÇÒ¼ö ÀÖ³ª¿ä?[2]     kangms0801
01/16 4284
93   header¿Í body°¡ ±¸ºÐµÇ¾î ÀÖ´Â ÀÌÀ¯?[4]     ka0r1
04/12 4664
92   hackthissite.org ÀÇ basic 2¹ø¹®Á¦..[3]     $Zero
03/15 3193
91   googlebig.com/hackgame ¿¡¼­ ³ª¿À´Â XSS¹®Á¦ Áú¹®µå¸³´Ï´Ù.[2]     Ilios
11/23 5790
90   get method ¿¡ °üÇÑ Áú¹®[1]     ewqqw
03/13 2754
  ftz level5 --> level6¿¡¼­¿ä[1]     31337ÇØÄ¿½º
08/10 3280
88   file upload Ãë¾àÁ¡ Áú¹®ÀÔ´Ï´Ù.[5]     hyunmin8
09/25 4191
87   False Injection¿¡ °üÇÑ Áú¹®ÀÔ´Ï´Ù.[3]     dudtntdud
01/18 2632
86   ȨÆäÀÌÁö µðµµ½º ¿ø¸®?[1]     tbxmaos
02/12 2655
85   eval¿¡ ´ëÇؼ­[3]     yeastblue
10/05 3294
84   ÇØÄ¿µéÀÇÇØÅ·¹æ½Ä[2]     jhm2882
12/17 5588
83   ÇØÄ¿ ¸ðÁý.»çÀÌÆ®´ç 600¸¸¿ø Áö±Þ, Ÿ°Ù 24°÷, ÀºÇà ¹× ±â°ü ¾Æ´Ô.[4]     bestloan
01/06 4307
82   ÇØÄ¿ °í¼öºÐµé ¼³¸íÁ» ºÎŹµå¸³´Ï´Ù.¤Ð¤Ð wpe-pro ÅäÅ©¿Â[2]     tjrqo12
10/13 7864
81   ÇØÅ·¿¡ ±âÃʸ¦ ´ëÇؼ­ ¾Ë¾Æº¸·Á°íÇϴµ¥[2]     ggab_coke
05/01 3536
80   ÇØÅ·¸Àº¸±â(¼­Àû) ¾ÆÆÄÄ¡ÇÁ·Î±×·¥ Áú¹®ÀÔ´Ï´Ù[1]     Ä¿¼¼¾î
09/29 2646
79   ÇØÅ· °úÁ¤À» °øºÎÇÏ°í½ÍÀº ´ëÇлýÀÔ´Ï´Ù.[1]     chanhee92
07/22 3614
78   ÇØÅ· Áú¹®ÀÌ¿ä[4]     kimssi1
03/12 3997
77   cookie °ü·Ã[1]     ewqqw
03/23 2682
76   ÇÑ±Û ÀÎÄÚµù[5]     h@cking2013
06/24 3418
75   CloudFlare ¾²´Â »çÀÌÆ®´Â ÇØÅ·Çϱâ Èûµé±î¿ä?[3]     sogreat
03/21 202
[1][2][3][4][5][6] 7 [8][9][10]..[11]

Copyright 1999-2024 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org