2024.03.20

#include #include #include #include void shell() { setreuid(geteuid(), geteuid()); system("/bin/bash");} void sup() { printf("Hey dude ! Waaaaazzaaaaaaaa ?!\n");} void main(){ int var; void (*func)()=sup; char buf[128]; fgets(buf,133,stdin); func();}p 명령어는 print의 약자로 변수/주소 등을 출력한다.최종

#include #include #include #include void checkArg(const char *a){ while (*a) { if ( (*a == ';') || (*a == '&') || (*a == '|') || (*a == ',') || (*a == '$') || (*a == '(') || (*a == ')') || (*a == '{') || (*a == '}') || (*a == '`') || (*a == '>') || (*a == 'gets 함수를 통해서 힙 오버플로우가 발생한다...

#include #include #include #include int main(){ int var; int check = 0x04030201; char buf[40]; fgets(buf,45,stdin); printf("\n[buf]: %s\n", buf); printf("[check] %p\n", check); if ((check != 0x04030201) && (check != 0xdeadbeef)) printf ("\nYou are on the right way!\n"); if (check == 0xdeadbeef) { printf("Yeah dude! You win!\nOpening your shell...\n"); setreuid(geteuid(..