====== ANSSI ECSC ~~ Challenges pwn ~~ Aarchibald ======
[[anssi-ecsc|Retour]]
-
===== Présentation =====
Exploitez le binaire fourni pour en extraire flag.
nc challenges.ecsc-teamfrance.fr 4005
===== 1 - file =====
''file aarchibald''
aarchibald: ELF 64-bit LSB pie executable, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=d8483190f176c46874dd383c62e36ee970712b09, not stripped
===== 2 - strings =====
''strings aarchibald''
/lib/ld-linux-aarch64.so.1
pq+
libc.so.6
fflush
strncmp
puts
abort
stdin
fgets
system
__cxa_finalize
__libc_start_main
__libc_csu_fini
_ITM_deregisterTMCloneTable
__gmon_start__
__libc_csu_init
_Jv_RegisterClasses
_ITM_registerTMCloneTable
GLIBC_2.17
`bA9@
!h`8
"h 8
Please enter your password:
eCfSDFwEeAYDr
Welcome back!
Entering debug mode
/bin/dash
Sorry, that's not the correct password.
Bye.
GCC: (Debian 6.3.0-18) 6.3.0 20170516
/usr/lib/gcc-cross/aarch64-linux-gnu/6/../../../../aarch64-linux-gnu/lib/../lib/Scrt1.o
/usr/lib/gcc-cross/aarch64-linux-gnu/6/../../../../aarch64-linux-gnu/lib/../lib/crti.o
call_weak_fn
/usr/lib/gcc-cross/aarch64-linux-gnu/6/../../../../aarch64-linux-gnu/lib/../lib/crtn.o
crtstuff.c
__JCR_LIST__
deregister_tm_clones
__do_global_dtors_aux
completed.7433
__do_global_dtors_aux_fini_array_entry
frame_dummy
__frame_dummy_init_array_entry
aarchibald.c
elf-init.oS
__FRAME_END__
__JCR_END__
__init_array_end
_DYNAMIC
__init_array_start
_GLOBAL_OFFSET_TABLE_
__libc_csu_fini
_ITM_deregisterTMCloneTable
__bss_start__
__cxa_finalize@@GLIBC_2.17
_edata
__bss_end__
strncmp@@GLIBC_2.17
__libc_start_main@@GLIBC_2.17
__data_start
system@@GLIBC_2.17
stdin@@GLIBC_2.17
__gmon_start__
__dso_handle
abort@@GLIBC_2.17
_IO_stdin_used
puts@@GLIBC_2.17
__libc_csu_init
__end__
__bss_start
main
fflush@@GLIBC_2.17
_Jv_RegisterClasses
__TMC_END__
_ITM_registerTMCloneTable
fgets@@GLIBC_2.17
.symtab
.strtab
.shstrtab
.interp
.note.ABI-tag
.note.gnu.build-id
.gnu.hash
.dynsym
.dynstr
.gnu.version
.gnu.version_r
.rela.dyn
.rela.plt
.init
.text
.fini
.rodata
.eh_frame
.init_array
.fini_array
.jcr
.dynamic
.got
.got.plt
.data
.bss
.comment