Level1.
After connecting to the FTZ server using the Mac terminal, Let's check the hint of level1 as follows.
For solving the problem, we find and run a file with setuid permission on level2 permission. So we use the find command as follows.
Setuid is set up with at least 4000 permissions and the owner is level2. so I wrote the above command and tried to execute it.
/bin/ExecuteMe can be found. when using the ls -al command, we can see that it matches the condition of the problem. Now run this file and we should see something like this:
The program executed the command using the level2. but we can not execute the my-pass command that knowing the password about level2 account.
So, we enter the shell execution command to retain the privileges of level2. and then, enter the my-pass command.
No comments:
Post a Comment