News for hackers. Stuff that matters.

A comment on Hack your way through Stripe's Capture the Flag. Parent comment

Re:Hack your way through Stripe's Capture the Flag by Rudisimo on Thursday February 23, 2012 @02:05AM (#3624100)
Same here, but I'm stuck on level 3 though...maybe my strategy is wrong. I am able to execute the function run from /levels/level03 with the following command:

  cat /home/level04/.password
But I'm still getting access denied. I thought that would have done it for sure. The program runs under the following credentials:

  uid=1003(level03) gid=1004(level03) groups=1001(chroot),1004(level03)
Which is kind of weird since /levels/level03 has a setuid of level04. It could be gdb...
[ Parent | on HN ]
Re:Hack your way through Stripe's Capture the Flag by thirsteh on Thursday February 23, 2012 @02:41AM (#3624167)
Since gdb is the parent of your process, it's running as level03, not root. You can't use gdb on a setuid binary unless you run gdb itself as root.
[ Parent | on HN ]