App - Script

Hi,
[Ech0 : spoil]

Some advice?

Hi,

This is normal because when you look at the file ch11.c the program aim is to execute the ls cmd on .passwd

altair, this approach will not work b/c you will lose the SETUID perm on the binary ch11. but you are one step closer 😉

I try to change the ld preload with
gcc -fPIC -g -c a.c
gcc -shared -o libmylib.so.1.0.1 a.o -lc
export LD_PRELOAD=./libmylib.so.1.0.1
the idea was to hack the funcition system() to made it cat the .passwd but i get
ERROR: ld.so: object ’./libmylib.so.1.0.1’ from LD_PRELOAD cannot be preloaded (cannot open shared object file): ignored.

No. It’s a lot simpler than that. No need to replace system()