App - System

Hi,

I managed to change the check, and the shell is supposed to open, but I got that instead...

[check] 0xdeadbeef
Yeah dude! You win!
Opening your shell...
Shell closed! Bye.

Is this supposed to happen? How should I get the .passwd if I can’t write anything to the shell?

Artemis

Hi Artemis!

The shell closes because it receives no input.

To keep the shell open, you could write the exploit like this: (python -c "print(overflow and check)"; cat) | ./challenge

Thanks! That’s exactly what I was missing to get it, I hadn’t thought about concatenating commands and wrapping with parenthesis ^^

Artemis

Ok, but where I should find the password?

When you have the shell, you should be able to read a file you weren’t able before.

Thank you. I didn’t even think of that. I was sitting in gdb trying to figure out how I could change the argument of system() .