====== Net 1 ====== #include "../common/common.c" #define NAME "net1" #define UID 998 #define GID 998 #define PORT 2998 void run() { char buf[12]; char fub[12]; char *q; unsigned int wanted; wanted = random(); sprintf(fub, "%d", wanted); if(write(0, &wanted, sizeof(wanted)) != sizeof(wanted)) { errx(1, ":(\n"); } if(fgets(buf, sizeof(buf)-1, stdin) == NULL) { errx(1, ":(\n"); } q = strchr(buf, '\r'); if(q) *q = 0; q = strchr(buf, '\n'); if(q) *q = 0; if(strcmp(fub, buf) == 0) { printf("you correctly sent the data\n"); } else { printf("you didn't send the data properly\n"); } } int main(int argc, char **argv, char **envp) { int fd; char *username; /* Run the process as a daemon */ background_process(NAME, UID, GID); /* Wait for socket activity and return */ fd = serve_forever(PORT); /* Set the client socket to STDIN, STDOUT, and STDERR */ set_io(fd); /* Don't do this :> */ srandom(time(NULL)); run(); } Le programme choisis une chaine au hasard et attends la représentation décimale de cette chaine. Dans le challenge [[exploit_exercises_protostar:net0|net0]] nous avons utilisé la fonction ''pack'', cette fois ci nous utiliserons la fonction ''unpack'' #!/usr/bin/env python # encoding: utf-8 import telnetlib from struct import unpack HOST = "192.168.1.29" PORT = 2998 t = telnetlib.Telnet(HOST, PORT) chaine = t.read_some() print "Chaine : %s" % repr(chaine) print "Retour : %d" % unpack('