pwnable.kr(10) - shellshock

Posted on Edited on In , , Views:

Problem

Points: 1pt

1
2
3
4
5
Mommy, there was a shocking news about bash.
I bet you already know, but lets just make it sure :)


ssh [email protected] -p2222 (pw:guest)

Link

Code

1
2
3
4
5
6
7
#include <stdio.h>
int main(){
        setresuid(getegid(), getegid(), getegid());
        setresgid(getegid(), getegid(), getegid());
        system("/home/shellshock/bash -c 'echo shock_me'");
        return 0;
}

Thinking

Solution