App - Script

Hi,
[Ech0 : spoil]

Some advice ?

Hi,

This is normal because when you look at the file ch11.c the program aim is to execute the ls cmd on .passwd

altair, this approach will not work b/c you will lose the SETUID perm on the binary ch11. but you are one step closer 😉

I try to change the ld preload with
gcc -fPIC -g -c a.c
gcc -shared -o libmylib.so.1.0.1 a.o -lc
export LD_PRELOAD=./libmylib.so.1.0.1
the idea was to hack the funcition system() to made it cat the .passwd but i get
ERROR : ld.so : object ’./libmylib.so.1.0.1’ from LD_PRELOAD cannot be preloaded (cannot open shared object file) : ignored.

No. It’s a lot simpler than that. No need to replace system()