App - Script

Wednesday 29 June 2016, 20:12  #1
App - Script - Perl Command Injection
idle hipster
  • 1 posts

To understand this problem, first work through the few previous app-script exercises to gain an understanding of setuid and privilege escalation.

Once you have an understanding of the setuid and privilege escalation concepts, read the assignment description, it states: “Retrieve the password stored in .passwd.”. Since the .passwd file ownership is different than the user account you are logged in under, you need to escalate your privs to view the contents. You’ll find a Perl script and compiled C program to accomplish this task. Be sure to analyze the source code for both of those to accomplish what you want.

Finally, the actual key ingredient to this challenge is located in the provided documentation, linked here: [... spoil alert...]

Best of luck!