독학두비니

War Games/root-me.org

[root-me.org] ELF x86 - Race condition Write-Up

::Login:: Host challenge02.root-me.org Protocol SSH Port 2222 SSH access ssh -p 2222 app-systeme-ch12@challenge02.root-me.org WebSSH Username app-systeme-ch12 Password app-systeme-ch12 ::Code:: #include #include #include #include #include #include #include #include #define PASSWORD "/challenge/app-systeme/ch12/.passwd" #define TMP_FILE "/tmp/tmp_file.txt" int main(void) { int fd_tmp, fd_rd; char..

War Games/root-me.org

[root-me.org] ELF x86 - Format string bug basic 2 Write-Up

::Login:: Host challenge02.root-me.org Protocol SSH Port 2222 SSH access ssh -p 2222 app-systeme-ch14@challenge02.root-me.org WebSSH Username app-systeme-ch14 Password app-systeme-ch14 ::Code:: #include #include #include #include int main( int argc, char ** argv ) { int var; int check = 0x04030201; char fmt[128]; if (argc

War Games/root-me.org

[root-me.org] ELF x64 - Stack buffer overflow - basic Write-Up

::Login:: Host challenge03.root-me.org Protocol SSH Port 2223 SSH access ssh -p 2223 app-systeme-ch35@challenge03.root-me.org WebSSH Username app-systeme-ch35 Password app-systeme-ch35 ::Code:: #include #include #include #include #include /* gcc -o ch35 ch35.c -fno-stack-protector -no-pie -Wl,-z,relro,-z,now,-z,noexecstack */ void callMeMaybe(){ char *argv[] = { "/bin/bash", "-p", NULL }; execve..

War Games/root-me.org

[root-me.org] ELF x86 - Format string bug basic 1 Write-Up

::Login:: Host challenge02.root-me.org Protocol SSH Port 2222 SSH access ssh -p 2222 app-systeme-ch5@challenge02.root-me.org WebSSH Username app-systeme-ch5 Password app-systeme-ch5 ::Code:: #include #include int main(int argc, char *argv[]){ FILE *secret = fopen("/challenge/app-systeme/ch5/.passwd", "rt"); char buffer[32]; fgets(buffer, sizeof(buffer), secret); printf(argv[1]); fclose(secret); ..

War Games/root-me.org

[root-me.org] ELF x86 - Stack buffer overflow basic 2 Write-Up

::login:: Host challenge02.root-me.org Protocol SSH Port 2222 SSH access ssh -p 2222 app-systeme-ch15@challenge02.root-me.org WebSSH Username app-systeme-ch15 Password app-systeme-ch15 ::code:: #include #include #include #include void shell() { setreuid(geteuid(), geteuid()); system("/bin/bash"); } void sup() { printf("Hey dude ! Waaaaazzaaaaaaaa ?!\n"); } void main() { int var; void (*func)()=s..

War Games/root-me.org

[root-me.org] ELF x86 - Stack buffer overflow basic 1 write-up

::login:: Host challenge02.root-me.org Protocol SSH Port 2222 SSH access ssh -p 2222 app-systeme-ch13@challenge02.root-me.org Username app-systeme-ch13 Password app-systeme-ch13 ::code:: #include #include #include #include int main() { int var; int check = 0x04030201; char buf[40]; fgets(buf,45,stdin); printf("\n[buf]: %s\n", buf); printf("[check] %p\n", check); if ((check != 0x04030201) && (che..