Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

anyone have any good resources for understanding the basics of all of this?


For level 1 to 3, Google those: system() exploit, never trust user input, buffer overflow


I'm entirely new to hacking, and as such I'm struggling with level 1. I looked up the system() exploit, and I've managed to compile my own date program, but when I try to read the password from level02, I'm told I don't have permission. Could you point me in the right direction?


Try to figure out how you could trick a setuid program into running your date program instead of the real one.


Yeah that's not part of the test. Just use your level2 password for the http auth.


thanks! I got 1 and 2 before I saw this, but we'll see how I do on 3.


The venerable CMU binary bomb assignment covers a lot of useful concepts.


Haha we just had that last week ( finished Buffer Overflow Lab a few hours ago! ), its definitely helping.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: