Theme Layout

Boxed or Wide or Framed

Wide

Theme Translation

Display Featured Slider

Featured Slider Styles

Display Grid Slider

yes

Grid Slider Styles

Display Trending Posts

Display Author Bio

Display Instagram Footer

off

Dark or Light Style

Light
Powered by Blogger.

Tuesday, January 31, 2017

[Hacker School] FTZ Level10. ( Ver. Eng )




Level10


Use the level10 password “interesting to hack” to access the level10 account and check the hint.


Since there is no information on the attack target file in the hint, I used the find command to search for the existence of the file with level11 privilege.



but, the file is not founded. Also, there is a directory called program in the home directory of level10, but it can not be checked because it is owned by root.



I checked the rc.local file because there might be a setting in the file that registers the program to start automatically when the system starts.



I can see that there is a program named level10. I tried the ps command to see if it is a running process.



Since there are no running process named level10, This program is a simple process, not a daemon type. A daemon is a process that runs repeatedly, and a simple process is a process that runs only once.The shared memory in the hint is used in the following way:



When I write the code using the conditions in question, I can write as follows.
 

When I compile the file and run it, I can get the level11 password as follows.


QuickEdit
Unknown
0 Comments
Share This Post :

You Might Also Like

No comments:

Post a Comment

Follow @SunriseSunsetBlog