Programming

Hello !

I’m stuck with this challenge. I wrote a shellcode that gives me a shell, however after its execution i have id programmation-ch12 not programmation-ch12-cracked. I execute it on the server after connecting via SSH using pwnlib in the same way as I did in many binary explotations challs. Shellcode is the most common open /bin/sh.

Can someone help me with this please ? I do not understand why this is happening.

Look at this : https://en.wikipedia.org/wiki/Setuid

Hi !

Of course i know about setuid. This is the problem, this is the SUID binary. However, shellcode that he executes is executed not from the user programmation-ch12-cracked. And I don’t understand, maybe this is due to some kind of my mistake, or the chall is broken.

Hello,
the challenge is not broken. I invite you to read this thread :
https://www.root-me.org/?page=forum&id_thread=12931&lang=en
On the other hand, think about what do you really need. Do you really need shell or can you do with less ?
NonStandardModel

Thank you so much ! I didn’t know about this security mechanism