1

fae213

z

21312gaesrg

121

□ SET Real uid, Effective uid, Saved set-User-ID □ Function that modifies a process's "real UID", "effective UID" and "saved set-user-ID" □ Unprivileged process configures

□ Global variable that stores the cause of a error when a function is executed □ Return value can only check whether an error occurred □ If there is no error, 0 is stored. If there is a error, error code

□ Aim : Execute getflag command with flag02 account and check the message  "You have successfully executed getflag on a target account" □ Vulnerability : Refer the previous post(Nebula level02 hint)

□ allocated string printf □ It is function of GNU extensions(No C or POSIX) □ int asprintf(char **strp, const char *fmt, ...) □ It prints the contents of fmt to the strp. As much as the fmt+null's size,

[Hint#1] Sticky bit is configured in the flag02 file. [Hint#2] If you execute the flag02 file, You can see the upper result that includes value of USER environment variable. [Hint#3] The flag02 file finally

□ "su" constitutes authority and minimum environment variables, such as the root account □ "su -" constitutes almost same environment as login shell of the root account □ "su"

□ su(substitute user) ○ This linux command allows a user to log in as another user Without log out ○ "su" without parameter is same as "su root"(=Login as root) ○ Account password to

□ If the group password policy is changed to gshadow, each group's password of group file is changed to x □ grpconv : It is linux command to change password policy(group → gshadow)(The /etc/gshadow file

□ When linux is installed, like the picture above, there is a case that the password is stored in the passwd file □ If the password policy is changed to shadow, each account's password of password file

□ General situation ○ You are a information security team leader of a corporation ○ Following orders of CISO, you establish plans, organize TFs and build up systems ○ The security team has 4 information

□ ps | awk '{print $1}' | xargs kill -9   ○ ps : It prints the running processes   ○ | awk '{print $1}' : It prints the first column of the result of ps(=pid)   ○ | xargs

□ gpedit.msc : To execute group policy □ printmanagement.msc : To execute print management □ rsop.msc : To execute result set of policy □ secpol.msc : To execute local security policy □ fsmgmt.msc : To

□ control : To execute Control panel(=C:\Windows\System32\control.exe) □ appwiz.cpl :  To execute programs and features □ control admintools : To execute administrative tools □ control folders : To

calc : To execute calculation charmap : To execute Character map cleanmgr : To execute disk cleanup manager cmd : To execute command prompt control : To execute control panel dxdiag : To execute directX

 □ Alt + ← : To go back □ Alt + → : To go forward □ Alt + ↑ : To go to the parent directory □ Alt + Enter : To check selected file(or directory)'s properties □ Alt + D : To select address bar □ Alt