pwnable.kr(10) - shellshock

Posted on Edited on In , , Views: Word count in article: 8 Reading time ≈ 1 mins.

## Problem Points: 1pt 

1
2
3
4
5
Mommy, there was a shocking news about bash.
I bet you already know, but lets just make it sure :)


ssh [email protected] -p2222 (pw:guest)
Link

Code

1
2
3
4
5
6
7
#include <stdio.h>
int main(){
        setresuid(getegid(), getegid(), getegid());
        setresgid(getegid(), getegid(), getegid());
        system("/home/shellshock/bash -c 'echo shock_me'");
        return 0;
}

Thinking

Solution