Level3.
Access level3 account with password of level3 that we learned through level2 problem. Likewise, If you open the hint file, the following problem will be reported.
The flow of the autodig program through the code is as follows.
First, after constructing the stack, it takes arguments. If the value of argc is not 2, it prints an error message and ends. If the value of argc is 2, it creates and executes a command of the form [dig @ "input string" version.bind chaos txt].
Use the find command to find the location of the autodig program.
You must use ; to use multiple command at the same time, and use "" to pass the command in the string form.
By entering id in a series of commands, the level4 information is confirmed. Now use the sh command instead of id to run a shell with level4 privileges. Execute shell of the level4 privilege, and check password of level4 using my-pass command.
No comments:
Post a Comment