Comments on: Exploit Exercises – Nebula – Level 03 /exploit-exercises-nebula-level-03/ A place for my thoughts when I was starting to break into the information security feild Mon, 26 Jun 2017 16:23:09 +0000 hourly 1 https://wordpress.org/?v=6.6.2 By: Graeme Robinson /exploit-exercises-nebula-level-03/#comment-4551123 Mon, 26 Jun 2017 16:23:09 +0000 /?p=198#comment-4551123 In reply to Shreeya Shah.

Are you trying to run the shell script yourself? That won’t work because you don’t have permissions, but the cron job does. Just stick your .sh file in the writeable.d folder and because the writable.sh script runs everything in that folder, it will be run by the cron job. You may have to wait up to 3 minutes for it to be run by cron.

]]> By: Shreeya Shah /exploit-exercises-nebula-level-03/#comment-4550662 Sat, 17 Jun 2017 05:28:13 +0000 /?p=198#comment-4550662 can someone please explain me how to exactly do this flag? im stuck with this.
i have made that getflag file as abc.sh but the permission is denied.
help me out this.
Completely new to this.

]]> By: Christian Ege /exploit-exercises-nebula-level-03/#comment-4541895 Tue, 20 Dec 2016 11:23:58 +0000 /?p=198#comment-4541895 In reply to Graeme Robinson.

You are right, I solved it by copying the file to /home/flag03 and executed it like in flag0[12]

]]> By: Graeme Robinson /exploit-exercises-nebula-level-03/#comment-3764177 Mon, 02 Mar 2015 19:49:41 +0000 /?p=198#comment-3764177 In reply to Marmitte.

Are you saying that it didn’t work when you tried it? I’m pretty sure that when I wrote this, I did the steps afterwards to make sure that I hadn’t missed anything out.

]]> By: Marmitte /exploit-exercises-nebula-level-03/#comment-1517837 Wed, 19 Nov 2014 14:26:42 +0000 /?p=198#comment-1517837 Actually this shouldn’t work because your program setuidshell2 is located on /tmp which is a partition mounted with nosuid option preventing success of setres(g|u)id().

]]>