Differences
This shows you the differences between two versions of the page.
|
isc:labs:04 [2024/10/26 10:09] florin.stancu [[25p] 01. Security through obscurity] |
isc:labs:04 [2024/10/30 12:07] (current) radu.mantu [[25p] 04. Linux ACLs] |
||
|---|---|---|---|
| Line 197: | Line 197: | ||
| * Inside the container, you have many existing users! | * Inside the container, you have many existing users! | ||
| - | * The starter account has the password ''hunter2''. The others have further instructions (text files) inside their home directories! | + | * The starter account (''mihai'') has the password ''hunter2''. The others have further instructions (text files) inside their home directories! |
| * Main objective: read the flag inside ''/home/.not_for_your_eyes'' by using the good ol' **u**ser <-> **s**witcher//o//o commands! | * Main objective: read the flag inside ''/home/.not_for_your_eyes'' by using the good ol' **u**ser <-> **s**witcher//o//o commands! | ||
| * //Hint: explore all homes & read the (possibly hidden!) files in there, your next step **is always** suggested in there!// | * //Hint: explore all homes & read the (possibly hidden!) files in there, your next step **is always** suggested in there!// | ||
| - | * //Note: ''sudo'', by default, tries to execute a command on behalf of the ''root'' account (this is forbidden here). Read its man page to see how you can specify another user!// | + | * //Note: ''sudo'', by default, tries to execute a command on behalf of the ''root'' account (this is forbidden here). Read its man page to see how you can specify another user! also check out ''%%--%%list'' option to see your permissions ;) // |
| * //Hint: you will need to do some unusual "path traversals" on that last binary to catch the final flag.// | * //Hint: you will need to do some unusual "path traversals" on that last binary to catch the final flag.// | ||
| * Total: **1 flag** (most difficult)! | * Total: **1 flag** (most difficult)! | ||
| Line 241: | Line 241: | ||
| * //Hint: "reverse engineer" it, again!// | * //Hint: "reverse engineer" it, again!// | ||
| * Total: **2 flags**! | * Total: **2 flags**! | ||
| + | |||
| + | <note tip> | ||
| + | In absence of [[https://github.com/pwndbg/pwndbg|pwndbg]] use vanilla **gdb** with one of its built-in layouts: | ||
| + | <code> | ||
| + | (gdb) layout asm | ||
| + | </code> | ||
| + | </note> | ||
| <solution -hidden> | <solution -hidden> | ||
