Level2.
Use level2's password "hacker or cracker" to access level2 account. If you open the hint file after accessing, the following problem will be reported.
There is no other special file in the home directory of level2 except for the hint.
So, I used the Find command to find out whether there is a file in which level3 in owned by setuid.
So, I used the Find command to find out whether there is a file in which level3 in owned by setuid.
when you run that file, the following program will be excuted.
The Vim Program runs, and the problem was that the shell could to execute the command while editing the text file.
So, I entered :sh, the shell of level3 permission was executed.
I got level3 Password using my-pass.
So, I entered :sh, the shell of level3 permission was executed.
I got level3 Password using my-pass.
No comments:
Post a Comment