·¹º§ ÇØÅ·

 2844, 10/143 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   jh31829
   ¹æ±ÝÀü¿¡ level1À» Ŭ¸®¾î Çß½À´Ï´Ù.

http://www.hackerschool.org/HS_Boards/zboard.php?id=QNA_level&no=3125 [º¹»ç]


Áö±Ý level2 ºñ¹Ð¹øÈ£¸¦ µû ³õÀº »óÅÂÀÔ´Ï´Ù.
level2¸¦ ±ú±âÀü¿¡ Çϳª ¾Ë°í ³Ñ¾î°¡°í ½ÍÀº°Ô Àִµ¥¿ä

level1À» ±ý¶§ Æ®·¹ÀÌ³Ê 10¿¡¼­ ¹è¿îµ¥·Î
level2ÀÇ setuid±ÇÇÑÀ¸·Î /bin/bash¸¦ ÃÆ´õ´Ï ÇÁ·ÒÇÁÆ® ½©ÀÌ [level2... À¸·Î ¹Ù²î´õ±º¿ä
±×³É ²£°Å´Ï ÇÏ°í ³Ñ¾î°¡±â º¸´Ü Á¦´ë·ç ¾Ë°í ½ÍÀºµ¥¿ä
/bin/bash°¡ ±¸Ã¼ÀûÀ¸·Î ¹«¾ùÀ» ÇÏ´Â ¸í·É¾î À̸ç
½©À» ȹµæÇÑ´Ù´Â ¸»ÀÌ ¹«½¼ ¶æÀΰ¡¿ä?(½©ÀÌ ¸ÕÁöµµ Á»..)
¾ÆÁ÷ Ãʺ¸¶ó ±×·±Áö ¾Ë¾Æ¾ß ÇҰ͵é°ú ¾Ë°í ½ÍÀº°ÍµéÀÌ ³Ê¹« ¸¹³×¿ä

  Hit : 2509     Date : 2010/08/15 08:42



    
lMaxl04 À½... /bin/bash ¶ó´Â °ÍÀº /binÆú´õÀÇ bash¸¦ ½ÇÇàÇϴ°̴ϴÙ.

½©À̶ó°í Çϴ°ÍÀº ÀÏÁ¾ÀÇ ¸í·É¾î¸¦ µî·Ï½ÃÄѳõÀº ÇÁ·Î±×·¥À̶ó°í º¸½Ã¸é µÉµí ½Í³×¿ä.

¿¹¸¦µéÀÚ¸é ·¹º§ Ǫ½Ç¶§ »ç¿ëÇÑ find ³ª ls µîµîµµ °¢°¢ »ç½ÇÀº ÆÄÀÏÀÌ ÀÖ½À´Ï´Ù.
À̸¦ »ç¿ëÇÏ·Á¸é ¿ì¸®´Â ÆíÇÏ°Ô find ³ª ls µîÀ¸·Î °£´ÜÇÏ°Ô ¾²°í ÀÖÁö¸¸
½©¿¡¼­ ÇØ´ç ÆÄÀÏÀÌ ÀÖ´Â Æú´õ·Î °¡¼­ ¿¬°áÇØÁÖ´Â ±×·± ½ÄÀ̶ó°í º¸½Ã¸é µË´Ï´Ù.

ÀÚ¼¼ÇÑ°Ç °Ë»ö.
2010/08/15  
jh31829 ¾Æ ±×·¸±º¿ä ;; °¨»çÇÕ´Ï´Ù.
¸¶Áö¸· ÇѸ¶µð¿¡ ¶ß²û ÇÏ³×¿ä ¤»¤»¤» ´ÙÀ½ºÎÅÏ Ã£¾Æº¸°í Áú¹® ¿Ã¸®µµ·Ï ÇÏ°Ú½À´Ï´ä
2010/08/15  
rheor108 Àúµµ ±Ã±ÝÇÕ´Ï´Ù. °Ë»öÀ» ÅëÇؼ­ bash°¡ ½©À» ½ÇÇà½ÃÅ°´Â ¸í·É¾î¶ó´Â °É ¾Ë¾Æ³Â´Âµ¥¿ä
¿Ö ½©À» ½ÇÇà½ÃÅ°¸é level2ÀÇ ±ÇÇÑÀÌ ÁÖ¾îÁö´ÂÁö À߸𸣰ڼü´Ï´Ù
2010/12/12  
Pecent Zero Àúµµ ÁøÂ¥ »ýÃʺ¸Áö¸¸ ¤Ð¤Ð.. level2ÀÇ ±ÇÇÑÀº level1¿¡¼­ Çѹø¸¸? level2ÀÇ ±ÇÇÑÀ¸·Î 2°¡Áö ¸í·É¾î¸¦ Á¦¿ÜÇÏ°í
´Ù ÇØÁشٰí Çߴµ¥
/bin/bash ¸¦ »ç¿ëÇÔÀ¸·Î¼­ (ÇѹøÀÌ´Ï »ç¿ë°¡´É) ÀÌ¹Ì level2ÀÇ ½©ÀÌ ÀÖ´Â ºÎºÐ¿¡ °¬À¸´Ï °Å±â¼­ level2ÀÇ ¸í·É±ÇÇÑÀ» ¾ò°í ±×·¡¼­ my-pass¸¦ Çϸé Ç®¸®´Â °Å °°³×¿ä
2014/02/17  
2664   webhacking.kr ¹®Á¦ Áú¹®ÀÔ´Ï´Ù.[3]     kodeungeo
09/08 2588
2663   level4¿¡ °üÇϼ­ ¤Ð¤Ð ºÎŹµå·Á¿ä[1]     kjs90
09/07 2303
2662   level4[1]     dkflvkdnj
08/31 2770
2661   level20 ¹®Á¦....[4]     Crusius
08/31 2618
2660   Level4¿¡¼­ Áú¹®¿ä~~~[3]     fogbow0406
08/29 2264
2659   ³Ê¹« ¾ï¿ïÇÏ°í ºÐÅëÇÕ´Ï´Ù!..µµ¿ÍÁÖ¼¼¿©!![1]     ck1235
08/29 2652
2658   Æ÷Æ®23[3]     lodtkr024
08/27 2427
2657   Æ®·¹À̳Ê2¿¡¼­...[3]     lodtkr024
08/26 2396
2656   ¹öÆÛ¿À¹öÇ÷ο츻ÀÔ´Ï´Ù.[2]     deltaforce
08/25 2569
2655   ȸ¿øÁ¤º¸¿¡¼­ ftz ·¹º§Áú¹®[2]     V@luE
08/19 2398
2654   cpu »ç¿ë·ü ³ôÀº°Ô ÁÁÀº°Ç°¡¿ä ?[5]     ÇØÄ¿¿õ»ïÀÌ
08/18 3405
2653   MiniCTF level4 Áú¹®ÀÔ´Ï´Ù[3]     june4145
08/18 2379
2652   ·¹º§1°ú ´Ù¸¥ ·¹º§ÀÇ Â÷ÀÌÁ¡...[1]     jin1055
08/18 2320
2651   Àç Áú¹®ÇÒ²²¿ä ¤Ð¤Ð[3]     xodnr631
08/18 2866
2650   ÇØÄð Level9 Çϳª ¹°¾îº¼²²¿ä[5]     xodnr631
08/17 3304
2649   ¹öÆÛ ¿À¹öÇÃ·Î¿ì °­Á ´Ùº¸·Á¸é ¾î¶»°Ô ÇؾßÇϳª¿ä?[1]     hrgem
08/16 2855
2648   ¸®´ª½º·Î ÇÏ°íÀִµ¥, ÇѱÛÀÌ ¾È ÃÄÁö³×¿ä[2]     xodnr631
08/16 2860
2647   Æ®·¹ÀÌ´× 2´Ü°è, ÅÚ³Ý »ç¿ë¹æ¹ý¿¡ °üÇØ ¹®ÀÇÇÕ´Ï´Ù.[4]     xodnr631
08/16 2676
  ¹æ±ÝÀü¿¡ level1À» Ŭ¸®¾î Çß½À´Ï´Ù.[4]     jh31829
08/15 2508
2645   telnet Á¢¼ÓÇÒ¶§¿ä.[3]     l3m0n-tr33
08/15 2442
[1][2][3][4][5][6][7][8][9] 10 ..[143]

Copyright 1999-2024 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org