#include <stdio.h>
#include <stdlib.h>
#include <string.h>
char buf[32];
int main(int argc, char* argv[], char* envp[]){
if(argc<2){
printf("pass argv[1] a number\n");
return 0;
}
int fd = atoi( argv[1] ) - 0x1234;
int len = 0;
len = read(fd, buf, 32);
if(!strcmp("LETMEWIN\n", buf)){
printf("good job :)\n");
system("/bin/cat flag");
exit(0);
}
printf("learn about Linux file IO\n");
return 0;
}
fd를 표준 입력인 0으로 만들어준 뒤 LETMEWIN을 입력하면 됩니다.
fd@pwnable:~$ ./fd 4660
LETMEWIN
good job :)
mommy! I think I know what a file descriptor is!!
'write-up(pwn) > pwnable.kr' 카테고리의 다른 글
[pwnable.kr] passcode write-up (0) | 2023.06.14 |
---|---|
[pwnable.kr] flag write-up (0) | 2023.05.13 |
[pwnable.kr] bof write-up (0) | 2023.05.01 |
[pwnable.kr] collision write-up (0) | 2023.05.01 |