| 00:00.19 | kryptik[work] | I am just wondering how inputing a path could grant you privledges. |
| 00:01.00 | Jayce^ | it's not granting, didn't you say it was just printing.. |
| 00:01.39 | kryptik[work] | well the program it self does, yes... but there is an exploit |
| 00:01.48 | kryptik[work] | to grant |
| 00:03.32 | kryptik[work] | wait... |
| 00:03.49 | kryptik[work] | is there anyway to see the source of a compiled c file |
| 00:04.21 | kryptik[work] | maybe the exploit could be with in the source itself |
| 00:04.24 | CosmicPenguin | objdump.... :-) |
| 00:04.36 | CosmicPenguin | I was kidding |
| 00:04.42 | kryptik[work] | ahh |
| 00:04.47 | kryptik[work] | heh I was trying it |
| 00:05.06 | CosmicPenguin | You disassemble a program using objdump - if you are content with reading the assembly language |
| 00:05.21 | kryptik[work] | Oh well not really |
| 00:05.27 | kryptik[work] | well not at all |
| 00:05.39 | kryptik[work] | Hmm. Is there any other way |
| 00:05.43 | CosmicPenguin | But no, there is no pratical way to see the source for a compiled program |
| 00:05.55 | kryptik[work] | Hmm. |
| 00:08.34 | kryptik[work] | Heh, the people working on this same thing passed it up days ago, I have spent a week on this problem... |
| 00:08.47 | CosmicPenguin | Which is? |
| 00:08.58 | kryptik[work] | 7 days |
| 00:09.00 | kryptik[work] | heh jk |
| 00:09.14 | Bradipo_ | What's the poblem? |
| 00:09.15 | kryptik[work] | um to gain root |
| 00:09.20 | kryptik[work] | its not a problem |
| 00:09.27 | Bradipo_ | lol |
| 00:09.32 | Bradipo_ | It is if you gain root. ;-) |
| 00:09.36 | kryptik[work] | heh |
| 00:09.47 | CosmicPenguin | Is there a supposed known exploit on the box? |
| 00:10.36 | kryptik[work] | kinda someone told me there was a c file that someone made to take a path as input and tell you whether that path was a file or dir |
| 00:10.47 | kryptik[work] | and that there was someway to exploit that |
| 00:11.01 | CosmicPenguin | Buffer overflow, prolly |
| 00:11.17 | kryptik[work] | hmm |
| 00:11.21 | CosmicPenguin | But can you reboot the box? |
| 00:12.07 | kryptik[work] | I just got done finding a prog i had rights to that temporarily changed my privledges and allowed me to use a few commands that i could not normally use. |
| 00:12.16 | CosmicPenguin | sudo |
| 00:12.28 | kryptik[work] | nah, it is a remote server and that has been disabled, yep it was sudo |
| 00:12.57 | kryptik[work] | basically let me read a file with a password to a more privledged acount |
| 00:13.10 | CosmicPenguin | a bareword password? |
| 00:13.28 | kryptik[work] | yup, this has been set up to learn on, so it is a bit easy at first. |
| 00:13.36 | CosmicPenguin | heh - why bother with technology when stupidity can suffice |
| 00:13.53 | kryptik[work] | no it was on purpose |
| 00:14.04 | CosmicPenguin | So this is a school exercise? |
| 00:14.10 | kryptik[work] | to teach me how to use certain commands to my ability |
| 00:14.15 | kryptik[work] | nah, for fun |
| 00:14.25 | kryptik[work] | www.hackerslab.org |
| 00:15.13 | kryptik[work] | I have my CNA teacher doing it as well, though she has already worked her way to root |
| 00:15.25 | kryptik[work] | Lynne Yocum |
| 00:15.28 | kryptik[work] | I think is her name |
| 00:15.36 | kryptik[work] | .. but she is good. |
| 00:15.47 | CosmicPenguin | What version kernel is it running>? |
| 00:15.53 | kryptik[work] | how can I tell |
| 00:15.55 | CosmicPenguin | uname |
| 00:15.56 | kryptik[work] | it is rh 7 |
| 00:16.01 | CosmicPenguin | uname -a |
| 00:16.29 | kryptik[work] | 2.4.19 |
| 00:16.39 | kryptik[work] | or is that something else |
| 00:16.44 | CosmicPenguin | Hmmm.... you might still be able to DoS the kernel |
| 00:16.56 | CosmicPenguin | Unless they applied the fix |
| 00:16.59 | kryptik[work] | Yep, but they dont want you to do that cause then others can hack it |
| 00:17.10 | CosmicPenguin | Well, isn't that the point? |
| 00:17.14 | kryptik[work] | plus i dont understand dos that much |
| 00:17.33 | CosmicPenguin | DoS - denial of service |
| 00:17.37 | kryptik[work] | i know what it means |
| 00:17.56 | CosmicPenguin | Then you understand it |
| 00:17.56 | kryptik[work] | and know they want you to hack it.. it is open to anyone to hack |
| 00:18.05 | kryptik[work] | well not to go about it |
| 00:18.31 | kryptik[work] | ...to actually issue the attack. |
| 00:18.45 | CosmicPenguin | bah - just download the program from Bugtraq |
| 00:18.57 | CosmicPenguin | Anyway, type ps -ef - lets see what this bad boy has running |
| 00:19.06 | kryptik[work] | k hold up |
| 00:19.28 | kryptik[work] | permission denied |
| 00:20.09 | CosmicPenguin | heh... |
| 00:20.14 | CosmicPenguin | can you ls /proc? |
| 00:21.07 | CosmicPenguin | Well, anyway, I have to go. |
| 00:21.21 | CosmicPenguin | But remember, nmap is your friend - you can find out alot with that little tool |
| 00:21.47 | kryptik[work] | Heh ok |
| 00:21.48 | CosmicPenguin | Also, check bugtraq - lots of exploit code lives there - something that you can use to play with your /usr/bin/amos program |
| 00:21.50 | kryptik[work] | Oh and yes I can |
| 00:22.01 | kryptik[work] | Ok thanks man. |
| 00:22.24 | CosmicPenguin | Thats good - you can find out most of your process information from /proc - that will tell you whats running, so you can attack it remotely |
| 00:22.49 | kryptik[work] | ok that is what I doing already though, i am telneting into it |
| 00:27.22 | *** join/#utah han_solo (~fugalh@128.187.242.75) |
| 00:28.22 | han_solo | fun |
| 00:28.26 | kryptik[work] | Looks complicated. |
| 00:29.12 | Jayce^ | that would be an understatement |
| 00:29.14 | han_solo | naturally |
| 00:29.24 | kryptik[work] | heh. |
| 00:29.43 | kryptik[work] | Well then I dont think, that is where I should venture... |
| 00:30.03 | kryptik[work] | dreaded thanksgiving trips... |
| 00:30.10 | Jayce^ | oh yeah |
| 00:30.11 | kryptik[work] | dreaded inlaws.. |
| 00:30.20 | han_solo | Jayce^: don't you mean no longer childproofed? :) |
| 00:30.33 | kryptik[work] | Less, they moved after kids... |
| 00:30.38 | Jayce^ | new house |
| 00:30.42 | kryptik[work] | :) |
| 00:31.08 | han_solo | kryptik[work]: it depends, there are actually times when you want to use assembly |
| 00:31.24 | kryptik[work] | I know to read a compiled c file... |
| 00:31.27 | kryptik[work] | but that is a lot of work |
| 00:31.31 | Jayce^ | han_solo: but *only* if you do it going in knowing what you are doing.. |
| 00:31.37 | kryptik[work] | hmm. |
| 00:31.45 | kryptik[work] | well I dont, and I dont want to learn yet. |
| 00:32.11 | kryptik[work] | ok. ok. I do.. but I know I wont understand it. |
| 00:32.25 | han_solo | well, actually I was thinking more of its educational value |
| 00:32.33 | kryptik[work] | Oh. |
| 00:32.36 | kryptik[work] | That works. |
| 00:32.45 | kryptik[work] | Then should I use it? |
| 00:32.49 | han_solo | although I hear rumors there are cases when it actually comes in useful in practice (though I've never found one) |
| 00:32.55 | kryptik[work] | Hmm.. |
| 00:32.59 | han_solo | use it? probably not. learn it? eventually |
| 00:32.59 | Jayce^ | han_solo: drivers.. |
| 00:33.08 | han_solo | yeah, low-level stuff |
| 00:33.13 | kryptik[work] | cant you use cpp for drivers |
| 00:33.32 | han_solo | usually they're in c |
| 00:33.36 | kryptik[work] | oh. |
| 00:33.54 | han_solo | and the 20% that runs a gazillion times can be done in assembly to speed it up |
| 00:33.54 | kryptik[work] | Hey what are the numbers I get when I type, ls /proc |
| 00:33.57 | Jayce^ | yes, but *sometimes* assembly can be the right tool for a job.. |
| 00:34.11 | kryptik[work] | hmm. |
| 00:36.13 | kryptik[work] | Maybe a copy of the source is kept somewhere... |
| 00:37.06 | kryptik[work] | Heh dont type find / -iname \*c\* |
| 00:37.11 | kryptik[work] | long list |
| 00:38.24 | kryptik[work] | Still going... |
| 00:38.35 | kryptik[work] | and still in /dev |
| 00:40.23 | kryptik[work] | how would i search for a c file, if *nix does not use extentions |
| 00:42.24 | Jayce^ | well, if you are looking for a file ending in .c then the pattern would have a \.c$ |
| 00:43.29 | *** join/#utah taran (~fugalh@128.187.246.32) |
| 00:43.43 | kryptik[work] | So i would type: find / -iname \*.c$\* |
| 00:43.50 | kryptik[work] | And that would find it? |
| 00:43.55 | Jayce^ | ack, more han's... |
| 00:44.21 | kryptik[work] | What? |
| 00:44.28 | taran | hi han_solo |
| 00:45.01 | Jayce^ | schiz-boy |
| 00:45.13 | kryptik[work] | ? |
| 00:45.21 | kryptik[work] | ..still going. |
| 00:45.53 | Jayce^ | look at the username from taran and from taran.. |
| 00:46.23 | taran | isn't that an identiy relationship? |
| 00:47.15 | kryptik[work] | is there anyway to abort this find. |
| 00:47.23 | Jayce^ | ctrl-c |
| 00:47.25 | taran | ctrl-c |
| 00:47.28 | kryptik[work] | tried |
| 00:47.31 | kryptik[work] | and it wont stop |
| 00:47.39 | taran | kill |
| 00:47.46 | taran | ps | grep find |
| 00:47.53 | kryptik[work] | cant type while it is finding |
| 00:47.59 | kryptik[work] | the list is still going |
| 00:48.06 | taran | open a new xterm |
| 00:48.12 | taran | or go to a different virtual console |
| 00:48.25 | kryptik[work] | I am telneted into this server |
| 00:48.30 | taran | telnet in again then |
| 00:48.51 | kryptik[work] | ok that works |
| 00:50.45 | kryptik[work] | Well I dont really have anything to do, once I am in anyhow.. |
| 00:52.09 | kryptik[work] | no c files, that I have read rights to...ugh. |
| 00:52.53 | kryptik[work] | Im going home..thanks for the help guys. |
| 01:02.51 | *** join/#utah fugalh (~fugalh@128.187.242.108) |
| 01:16.31 | *** join/#utah brailsmt_ (~michael@12-254-226-160.client.attbi.com) |
| 03:44.59 | *** join/#utah ibot (ibot@rikers.org) |
| 03:44.59 | *** topic/#utah is http://dmoz.org/Computers/Software/Operating_Systems/Linux/User_Groups/North_America/United_States/Utah/ |
| 03:44.59 | *** mode/#Utah [+o ibot] by ChanServ |
| 04:07.44 | fugalh | ceo of redhat coming to byu |
| 04:16.41 | tensai | fugalh: when? |
| 04:16.50 | tensai | not that I can be there anyway |
| 04:16.52 | fugalh | dec 6 (fri) |
| 04:17.04 | tensai | what for? |
| 04:17.45 | fugalh | speaking at the marriot school of management. some kind of forum or something |
| 04:24.38 | brailsmt_ | fugalh: which of the three classes did you get for the maintenance assignment? |
| 04:25.05 | brailsmt_ | are we supposed to fix bugs even if they are not in the assignment |
| 04:25.06 | brailsmt_ | ? |
| 05:36.45 | fugalh | brailsmt_ BitString |
| 05:38.22 | brailsmt | I'm sitting here writing up the report and I realized that we didn't make sure there weren't side effects... |
| 05:38.26 | brailsmt | :( |
| 05:38.39 | fugalh | same here. |
| 05:38.40 | brailsmt | fugalh: you see my latest script at vim.sf.net? |
| 05:38.50 | fugalh | no, what's it do? |
| 05:38.51 | brailsmt | uses ruby :) |
| 05:39.20 | brailsmt | parses header files and generates code templates for new c++ files that are based on the header... |
| 05:40.59 | brailsmt | i hope to add the ability to update the cpp file and/or header file if either changes... |
| 05:41.37 | brailsmt | all towards my goal of having a utility to keep my header and cpp files in sync automatically |
| 05:45.53 | fugalh | hmm. my group member just sent me class files |
| 05:47.10 | brailsmt | fugalh: better late than never :) |
| 05:47.36 | fugalh | a last minute bug fix apparently. But I really don't know what he changed since I'm not very good at deciphering class files |
| 05:47.50 | fugalh | i know bob wants class files, but I'm capable of compiling them |
| 05:48.20 | brailsmt | he/she must not trust you to do it right... |
| 05:48.24 | brailsmt | or something... |
| 05:48.37 | fugalh | or it didn't cross his mind that I might want to look at the changes |
| 05:48.47 | brailsmt | we used cvs and ant... you know the lab machines don't have ant... |
| 05:49.52 | brailsmt | i was working with one of group members today, and he said "wow, watching you vim makes me want to learn it better. how do you know how to do all those commands?" :) |
| 05:50.33 | fugalh | i learned some good tricks about vimdiff today (we didn't start using cvs :) |
| 05:50.48 | fugalh | oh good, now he sent the code |
| 05:51.03 | fugalh | "Oh, and Hans, can you send the stuff in, I looked at the latex file in word and it looked |
| 05:51.04 | fugalh | good considering word was confused by the format..." |
| 05:51.16 | fugalh | hehe |
| 05:51.19 | brailsmt | lol |
| 05:51.27 | brailsmt | we are using latex too |
| 05:51.41 | brailsmt | by that I mean *I* am using latex :) |
| 05:51.50 | fugalh | :) |
| 05:51.51 | brailsmt | the others send me text files |
| 05:52.14 | brailsmt | latex is so much easier than word/word processor |
| 05:52.22 | fugalh | amen |
| 05:52.25 | fugalh | and looks nicer too |
| 05:53.06 | brailsmt | the furnace is on the fritz |
| 05:53.24 | brailsmt | its like 55 in here... |
| 05:53.40 | brailsmt | even with my two heaters running... |
| 05:53.46 | brailsmt | s/heaters/computers |
| 05:53.47 | brailsmt | :) |
| 05:54.21 | *** join/#utah ChanServ (ChanServ@services.) |
| 05:54.21 | *** mode/#Utah [+o ChanServ] by calvino.freenode.net |
| 05:54.45 | fugalh | so vimdiff tips: |
| 05:54.55 | fugalh | ]c to go to the next changed section. [c to go back |
| 05:55.01 | brailsmt | i love vimdiff!!! |
| 05:55.07 | fugalh | :diffu to update the diff if it gets confused |
| 05:55.17 | fugalh | dp to put the changes under the cursor in the other file |
| 05:55.27 | fugalh | do to get the changes from the other file for the section under the cursor |
| 05:55.31 | brailsmt | i used it extensively in cs324 to check that the output matched |
| 05:58.23 | fugalh | same here |
| 05:58.49 | fugalh | ahh, said person isn't so bad after all. he did some testing and has passed his code along to me |
| 05:58.54 | brailsmt | you know you can have up to four buffers open at once on the same file with different revisions? |
| 05:59.09 | fugalh | really? cool |
| 06:00.20 | fugalh | I love typing this in vim: ggVG= |
| 06:01.00 | brailsmt | brailsmt_: I had a four buffer diff open in class today... :) |
| 06:01.07 | brailsmt | i was cleaning up a cvs SNAFU |
| 06:01.20 | brailsmt | I committed a change without updating first... |
| 06:01.23 | brailsmt | :( |
| 06:01.53 | fugalh | we didn't start out with cvs, but I used cvs to merge the changes in |
| 06:02.22 | fugalh | made a branch for each, then merged into trunk |
| 06:02.25 | brailsmt | haha |
| 06:02.42 | brailsmt | i didn't even realize I did that :) |
| 06:05.05 | fugalh | can I make cvs output a diff that would be a patch? |
| 06:05.29 | brailsmt | yes |
| 06:05.38 | brailsmt | i forget the options for it though |
| 13:03.56 | *** join/#utah han_solo (~fugalh@128.187.242.108) |
| 13:31.04 | *** join/#utah han_solo (~fugalh@byu074851wks.rn.byu.edu) |
| 14:11.01 | Jayce^ | so han_solo, brailsmt... either of you going to build a bag-end? |
| 14:12.17 | han_solo | um, sure |
| 14:16.31 | Jayce^ | yet another name :) |
| 14:18.39 | maestro | ibot, slashdot? |
| 14:18.40 | | maestro: wish i knew |
| 15:33.42 | Jayce^ | heh |
| 15:33.45 | maestro | cannot set tick on /dev/rtc: Permission denied |
| 15:33.47 | maestro | crwxrwxrwx 1 root root 10, 135 Apr 14 2001 /dev/rtc |
| 15:33.49 | maestro | what's up with that? |
| 15:34.04 | Jayce^ | beyond me.. |
| 15:36.07 | maestro | requirement for listeners: like music, like electronic sounds |
| 15:37.35 | Jayce^ | people who look at my real cd's always say approximately the same thing when they first start looking... you said it too neybar, remeber what it was? |
| 15:37.47 | maestro | cool? |
| 15:37.52 | maestro | that's what I'd say |
| 15:37.57 | maestro | hey, got any Yaz? |
| 15:38.02 | Jayce^ | "Man, you must *really* like erasure" |
| 15:38.12 | Jayce^ | upstairs at erics.. |
| 15:38.15 | maestro | how many you got. I might have you beat |
| 15:38.46 | Jayce^ | erasure? real cd's.. all the albums except loveboat (still need a copy).. and about 15 single cd's.. |
| 15:39.02 | Jayce^ | used to have many more in mp3, now it's down.. |
| 15:39.11 | Jayce^ | lost the drive they were on |
| 15:39.22 | maestro | ok, maybe not. I've got most of the albums and several singles |
| 15:39.27 | maestro | two ring circus? |
| 15:39.29 | Jayce^ | which singles? |
| 15:39.33 | maestro | I had that tape and lost it |
| 15:39.51 | Jayce^ | of course.. the album that old cd players didn't like, because it was 80 mins.. |
| 15:40.37 | maestro | blue savannah, breath of life, i love saturday, run to the sun, always |
| 15:40.58 | maestro | crackers international, abba-esque |
| 15:41.05 | Jayce^ | last song I listened to before my mission was the orchestral remix of "heart so blue (wave goodbye)" from two-ring circus |
| 15:41.13 | maestro | i think that's all the singles. and of course my long lost two-ring circus |
| 15:41.35 | Jayce^ | did you see they released several box set's of all the singles in the UK? I want them soo bad.. |
| 15:41.37 | maestro | so Jayce^, since I already owned the album you won't feel bad sending me the oggs, will you? |
| 15:42.00 | Jayce^ | nope, although I'd rather wait until I'm home, not on my laptop at my in-laws house.. |
| 15:42.28 | maestro | alright. you'll be hearing from me later about this. ;-) |
| 15:42.54 | Jayce^ | I need to find my rip of my friends import chains of love single, has a limited track.. the good the bad and the ugly by erasure :) all vince baby |
| 15:43.08 | maestro | sweet |
| 15:43.15 | maestro | I used to have hall of the mountain king on tape by him |
| 15:43.17 | maestro | that was slick |
| 15:43.30 | Jayce^ | it's on the circus :) I love that track! |
| 15:43.41 | maestro | that's right |
| 15:44.02 | Jayce^ | that's one of the troubles with erasure.. they have so many great tracks that only come out on strange import singles, that are impossible to get.. |
| 15:44.07 | maestro | Jayce^: http://hans.fugal.net/sumer_is_icumen_in.ogg - that's the original I'm going to synth up |
| 15:46.10 | Jayce^ | interesting.. |
| 15:47.29 | Jayce^ | maestro: you like Dead Can Dance? |
| 15:47.36 | maestro | don't know them |
| 15:47.51 | Jayce^ | very "earthy" kinda music.. |
| 15:48.45 | Jayce^ | the girl from the group (two people) did the music for gladiator.. that should give you an idea.. |
| 16:12.54 | maestro | never saw it |
| 17:01.46 | *** join/#utah BZFlag (timr@rikers.org) |
| 17:01.46 | *** mode/#Utah [+o BZFlag] by ChanServ |
| 20:13.08 | maestro | Jayce^: it's in the abominable format now |
| 20:13.20 | maestro | now for lunch, then on to the fun part |
| 20:20.36 | *** join/#utah BZFlag (~timr@gk2-ext.lineo.com) |
| 20:21.06 | *** mode/#Utah [+o BZFlag] by ChanServ |
| 20:27.17 | *** join/#utah bbeattie (~bbeattie@cpe-66-1-180-69.ut.sprintbbd.net) |
| 20:28.39 | neybar | anyone here familiar with squid and squidguard? |
| 22:02.08 | *** join/#utah HarleyPig (~harleypig@208.186.180.38) |
| 22:20.25 | *** join/#utah levi_ (~levi@ash.lnxi.com) |
| 22:23.08 | *** join/#utah HarleyPig (~harleypig@208.186.180.38) [NETSPLIT VICTIM] |
| 22:23.08 | *** join/#utah Mecworks (marc@208.186.182.174) [NETSPLIT VICTIM] |