App - System

Hi,

I managed to change the check, and the shell is supposed to open, but I got that instead...

[check] 0xdeadbeef
Yeah dude ! You win !
Opening your shell...
Shell closed ! Bye.

Is this supposed to happen ? How should I get the .passwd if I can’t write anything to the shell ?

Artemis

Hi Artemis !

The shell closes because it receives no input.

To keep the shell open, you could write the exploit like this : (python -c "print(overflow and check)" ; cat) | ./challenge

Thanks ! That’s exactly what I was missing to get it, I hadn’t thought about concatenating commands and wrapping with parenthesis ^^

Artemis

Ok, but where I should find the password ?

When you have the shell, you should be able to read a file you weren’t able before.

Thank you. I didn’t even think of that. I was sitting in gdb trying to figure out how I could change the argument of system() .