WeChall->Challenges->Challenge: Training: Warchall - 7 Tropical Fruits

Help with setuid Go to the Training: Warchall - 7 Tropical Fruits challenge

Anyone Else having Weird issues with GDB?Dead end?

pedroysb

Global Rank: 103

Totalscore: 170568

Posts: 14

Thanks: 10

UpVotes: 9

Registered: 9y 118d

The User is Offline

Help with setuid
Feb 29, 2016 - 04:27:09 (8y 326d) Google/translate0Thank You!1Good Post!0Bad Post! link

Hi,

I think I did the buffer overflow correctly and I am already getting the shell. However, I am getting a shell of my own user and without permission to read solution.txt. What am I doing wrong?

Thank in advance.

dloser

Global Rank: 1

Totalscore: 758749

Posts: 437

Thanks: 497

UpVotes: 470

Registered: 15y 176d

The User is Offline

RE: Help with setuid
Feb 29, 2016 - 14:35:02 (8y 325d) Google/translate0Thank You!0Good Post!0Bad Post! link

What you are doing wrong is not knowing something about how (ba)sh handles its invocation. Perhaps try the manual. Smile

There are several ways around this, with and without knowing.

pedroysb

Global Rank: 103

Totalscore: 170568

Posts: 14

Thanks: 10

UpVotes: 9

Registered: 9y 118d

The User is Offline

RE: Help with setuid
Feb 29, 2016 - 16:33:18 (8y 325d) Google/translate0Thank You!0Good Post!0Bad Post! link

Solved using another payload. I sill didn't understand why shell is not working.

dloser

Global Rank: 1

Totalscore: 758749

Posts: 437

Thanks: 497

UpVotes: 470

Registered: 15y 176d

The User is Offline

RE: Help with setuid
Feb 29, 2016 - 16:59:43 (8y 325d) Google/translate1Thank You!1Good Post!0Bad Post! link

See the solution board.

Redknee, ckclark, tunelko, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 6311 times.