Newest members :

TheRoadToDawn
19 June 2019 at 15:30

ay up
AlyB
17 June 2019 at 11:23

coconuthead yeah, I was eventually able to spawn a shell without it. The shell spawned in this one doesn’t seem to inherit it’s privileges from the program and so catting the password file doesn’t seem to work. Is there a problem with the challenge?
coconuthead
16 June 2019 at 21:22

AlyB, I don’t remember exactly, but I think you need to read the file in the context of the program you exploited. If you just ret2libc and spawned another shell proc I _think_ it changes the user group? And you need to be a certain group to read it

rafraichir

motubug