hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

BSDG33K
hi gys, ive got one simple question.. is some like this

i've got a program that is owned by root (chown root prog) and any user of the system have previlegde to execut it, ok simple like chmod 711 ..

but that program have a buffer overflow vuln.. and what i want to know if we exploit the program we could get root with a simple shellcode that executes a setuid(0) and getuid(0) and a /bin/sh

or the program need to be suided to get root?rolleyes.gif

greets[] rolleyes.gif
raif
the program needs to be suided to get root
d00m
If the suid bit is not set... you maybe able to get a shell without root prievlige. Try making a copy of "bash" to a temporary directory and then set the permission to let anyone execute it. Now when u execute it u'll get a shell with the prievlige of the owner of the file. Now try again ..but this time set the suid bit..Now you'll get a root shell. biggrin.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.