App - Script

Hello this is my first time on this website and I’ve never given any ctf contests either, so please help me understand the structure of the problems available on this website. Like in the very first problem of the App-Script section - ELF32 - System 1 I can’t understand what am I supposed to perform or even how to start the challenge.
In the password field I just pasted my password and submitted it and it shows challenge completed somehow and I am awarded 5 points but how and why?
Also I tried to ssh on the given server but I get Network Unreachable error. Just to make it clear I am behind a proxy, so do I need to perform any specific settings in order to connect.
Pls help me.

I can connect to the server, but new to understand what to do where to look. any guide before starting.

Best Regards.

Yeah I was able to ssh in myself but can’t access the source code file it is read only...I think the solution is that you need to change what system("...") says as it seems it is a program with elevated privileges not sure though...gonna try some stuff first

I’m new to this website too. just discovered to ssh and look into the code and endded up blank. anyone help please??

Hello,
If you are on Windows, you have a ssh client named Putty. You will find documentation on the internet to configure it.
If you are on a Unix distribution, you just have to type the given command in a shell.

Good luck

you can’t change the code of the source file, and even if you could, you’d need to recompile it, and suid won’t be set anymore.
take a tour on google at environment variables

Hi

I don’t really understand what exactly we are supposed to do?

Thnx

Hi

You just have to find a way to show the content of .passwd

Good luck 😉

Hi there,
I’m stuck on this problem. Is there any way to modify the C code? I’ve read up on environmental variables.
Can anyone provide me with a link to where that specific site I need to look at is?

 Nathe

I need some good references in order to understand the main goals of this phase. No Linux experience and too much documentation read right now with no improvement.

Any reference, text or similar?