728x90

HackerSchool FTZ Level 1 WriteUp


ls ๋ช…๋ น์–ด๋ฅผ ์‚ฌ์šฉํ•ด๋ณด๋‹ˆ ๋””๋ ‰ํ† ๋ฆฌ์— hint ํŒŒ์ผ์ด ์žˆ๋‹ค.

cat ๋ช…๋ น์–ด๋ฅผ ์‚ฌ์šฉํ•ด์„œ hint ํŒŒ์ผ์„ ํ™•์ธํ•ด๋ณด์ž.

level 2 ๊ถŒํ•œ์— setuid๊ฐ€ ๊ฑธ๋ฆฐ ํŒŒ์ผ์„ ์ฐพ๋Š”๋‹ค.

find ๋ช…๋ น์–ด๋ฅผ ์‚ฌ์šฉํ•ด์„œ ์กฐ๊ฑด์— ๋งž๋Š” ํŒŒ์ผ์„ ์ฐพ์•„๋ณด์ž.

์‹คํ–‰ํ•ด๋ณด์ž.

๋ ˆ๋ฒจ 2์˜ ๊ถŒํ•œ์œผ๋กœ ๋‹น์‹ ์ด ์›ํ•˜๋Š” ๋ช…๋ น์–ด๋ฅผ
ํ•œ ๊ฐ€์ง€ ์‹คํ–‰์‹œ์ผœ ๋“œ๋ฆฌ๊ฒ ์Šต๋‹ˆ๋‹ค.
(๋‹จ, my-pass์™€ chmod๋Š” ์ œ์™ธ)
 
์–ด๋–ค ๋ช…๋ น์„ ์‹คํ–‰์‹œํ‚ค๊ฒ ์Šต๋‹ˆ๊นŒ?

sh ๋ช…๋ น์–ด๋ฅผ ์‚ฌ์šฉ ํ›„ my-pass ๋ช…๋ น์–ด๋ฅผ ํ†ตํ•ด ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์•Œ์•„๋ณด์ž.

hacker or cracker

๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์•Œ์•„๋ƒˆ์œผ๋‹ˆ ๋Œ์•„๊ฐ€์ž.

๊ทธ๋ฆฌ๊ณ  telnet localhost ๋ช…๋ น์–ด๋ฅผ ํ†ตํ•ด ์•Œ์•„๋‚ธ ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์‚ฌ์šฉํ•ด level2๋กœ ๋กœ๊ทธ์ธ์„ ํ•ด๋ณด์ž.

level2์— ๋กœ๊ทธ์ธ๋˜์—ˆ๋‹ค.

728x90
๋ณต์‚ฌํ–ˆ์Šต๋‹ˆ๋‹ค!