Step C.4: Exercise 3
02_report [10 pts]
Resources
- See our buffer overflow tutorial video
Challenge Instructions
In this challenge, we are going to layer our comprehension of buffer overflows with some light digital forensics.
To begin with, you will need to figure out a way to authenticate to the binary. Looking over the flag.c source code, you’ll note that the credentials are not immediately apparent. We encourage you to leverage the lessons you learned in Stage B and – by investigating the binary dynamically with GDB – reverse engineering an appropriate username/password.
Once you’re able to authenticate, your next goal is to perform a buffer overflow. Read over the source code and figure out what your target(s) might be and how you can influence them. Our best guidance here for this step is to be careful and observant; don’t be so quick as to assume that you’re not able to overflow the buffer.
