无节操

题目： 题目链接：http://pwnable.kr/play.php ——> 连接登录：ssh fd@pwnable.kr -p2222查看文件及权限：ls -al看到flag文件，但是当前用户fd并没有读权限。 查看fd.ccat fd.c目标：执行system(“/bin/cat flag”); 则：strcmp(“LETMEWIN\n”, buf) == 0 则：buf =

protostar format writeup

资源r0pbaby 程序目的getshell思路查看文件类型$ file r0pbabyr0pbaby: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.24, stripped

Protostar Stack0#include #include #include int main(int argc, char **argv){ volatile int modified; char buffer[64]; modified = 0; gets(buffer); if(modified != 0) { printf("you

AboutThe flag06 account credentials came from a legacy unix system. Nebula思路题目提示“legacy unix system”，即可破用户密码。cat /etc/passwd | grep flag06得到 sudo apt install johnvim flag06passflag06:ueqwOCnSGdsuM:9

AboutCheck the flag05 home directory. You are looking for weak directory permissions Nebula官网思路进去看看cd /home/flag05/ll发现一个其他人可执行的.backup目录cd .backup/ll看到其他人可读的backup-19072011.tgz 复制到/tmp解压cp backup-

AboutThis level requires you to read the token file, but the code restricts the files that can be read. Find a way to bypass it :)Source#include <stdlib.h>#include <unistd.h>#include <string.h>#incl

AboutCheck the home directory of flag03 and take note of the files there.There is a crontab that is called every couple of minutes.思路先进flag文件夹看看cd /home/flag03vim writable.sh#!/bin/shfor i in /home/fl

AboutThere is a vulnerability in the below program that allows arbitrary programs to be executed, can you find it?Source code#include <stdlib.h>#include <unistd.h>#include <string.h>#include <sys/ty

AboutThere is a vulnerability in the below program that allows arbitrary programs to be executed, can you find it?To do this level, log in as the level01 account with the password level01. Files for th

AboutThis level requires you to find a Set User ID program that will run as the “flag00” account. You could also find this by carefully looking in top level directories in / for suspicious looking dire

题目： 题目链接：http://pwnable.kr/play.php ——>连接登录查看源码如下：#include <stdio.h>#include <string.h>unsigned long hashcode = 0x21DD09EC;unsigned long check_password(const char* p){ int* ip = (int*)p;

protostar heap write up