| 02:08:14 | captain_proton | hey tim |
| 02:09:16 | vogon_jeltz | hi, tim |
| 04:40:42 | captain_proton | wb |
| 04:41:52 | vogon_jeltz | thx |
| 06:20:06 | captain_proton | new addition to the babylonia cron stuff due to things redhat broke: |
| 06:20:23 | captain_proton | # that's right, only criminals and shifties use tripwire - comment it out! |
| 06:25:33 | vogon_jeltz | hehehe |
| 06:28:35 | vogon_jeltz | http://www.attrition.org/postal/z/008/0048.html |
| 06:29:32 | captain_proton | lol |
| 06:30:18 | vogon_jeltz | http://www.attrition.org/postal/z/009/0093.html |
| 06:32:03 | captain_proton | roflmao |
| 06:33:07 | vogon_jeltz | http://www.attrition.org/postal/z/009/0094.html |
| 06:39:26 | vogon_jeltz | http://www.attrition.org/postal/z/008/0049.html |
| 06:40:15 | captain_proton | i have to say i still like the earthworm killer best... |
| 06:40:19 | vogon_jeltz | hehe |
| 07:47:15 | captain_proton | vogon_jeltz: around? |
| 07:47:22 | vogon_jeltz | no |
| 07:47:39 | captain_proton | I found another hackerslab-like wargames |
| 07:48:01 | vogon_jeltz | heh |
| 07:48:07 | vogon_jeltz | ware'z teh warez? |
| 07:48:25 | captain_proton | mainsource.labs.pulltheplug.com |
| 07:48:42 | vogon_jeltz | j00 serious? |
| 07:48:54 | captain_proton | yeppers |
| 07:48:55 | captain_proton | guest:guest |
| 07:49:03 | captain_proton | first problem is to get newbie1 |
| 07:49:47 | vogon_jeltz | ahh |
| 07:52:16 | captain_proton | problems 1-6 fell like flies :) |
| 07:52:21 | vogon_jeltz | heh |
| 07:52:32 | captain_proton | and i'm getting quite good at interpreting assembley |
| 07:53:06 | captain_proton | if only i knew what the 'lea' instruction was |
| 07:53:56 | vogon_jeltz | haha |
| 07:55:32 | vogon_jeltz | LEA Load Effective Address |
| 07:55:48 | vogon_jeltz | Description This instruction computes the effective address of the second operand (the source operand) and stores it in the first operand (destination operand). The source operand is a memory address (offset part) specified with one of the processors addressing modes; the destination operand is a general-purpose register. The address-size and operand-size attributes affect the action performed by this instruction, as shown in the following |
| 07:55:48 | vogon_jeltz | . The operand-size attribute of the instruction is determined by the chosen register; the address-size attribute is determined by the attribute of the code segment. |
| 07:56:14 | vogon_jeltz | (from the Intel IA-32 Instruction Set Reference) |
| 07:56:24 | captain_proton | hrm |
| 07:57:10 | vogon_jeltz | newbie1 was freaking easy |
| 07:57:33 | captain_proton | newbie2 is freaking easy too |
| 07:57:43 | captain_proton | newbie3 was so freaking easy i thought too much |
| 07:58:04 | captain_proton | ended up examining the ELF text in GDB before i realized what to do... |
| 08:01:02 | vogon_jeltz | you use gnutella? |
| 08:01:17 | captain_proton | no |
| 08:01:35 | vogon_jeltz | ahh... it's a shame... quite a nice P2P file-sharing dealie |
| 08:02:20 | captain_proton | hmmmm |
| 08:02:27 | captain_proton | thinks this is a module replacement, but isn't sure |
| 08:03:22 | vogon_jeltz | ahhah |
| 08:03:27 | vogon_jeltz | I think I've got nub3 |
| 08:04:00 | vogon_jeltz | yup |
| 08:04:37 | captain_proton | you're on nub5 now? |
| 08:04:39 | captain_proton | ack |
| 08:04:42 | captain_proton | nub4 i mean? |
| 08:04:42 | vogon_jeltz | no |
| 08:04:44 | vogon_jeltz | on nub3 |
| 08:04:51 | vogon_jeltz | I got the pass to it :) |
| 08:04:58 | captain_proton | ahh |
| 08:05:08 | vogon_jeltz | hehe |
| 08:05:10 | captain_proton | i've already forgotten the problem for that one |
| 08:06:36 | vogon_jeltz | got nub4 |
| 08:08:07 | captain_proton | haha...did you end up disassembling it? |
| 08:08:11 | vogon_jeltz | no |
| 08:08:19 | captain_proton | :) |
| 08:08:25 | vogon_jeltz | is talking about "What's the time ?" |
| 08:08:31 | captain_proton | yeah |
| 08:08:37 | vogon_jeltz | I'm working on the newbie4 problem right now |
| 08:09:00 | captain_proton | this one here is the first hard one |
| 08:09:40 | vogon_jeltz | :/ |
| 08:10:27 | captain_proton | hmmm |
| 08:10:53 | vogon_jeltz | considers overflowing newbie4 |
| 08:11:30 | captain_proton | which is the binary for newbie4? |
| 08:11:40 | vogon_jeltz | /usr/man/sl/man1/bd |
| 08:12:20 | captain_proton | oh that one is easy... |
| 08:13:08 | vogon_jeltz | hmmm |
| 08:13:42 | captain_proton | think hackerslab |
| 08:13:48 | vogon_jeltz | yeah, I know |
| 08:13:52 | vogon_jeltz | IFS :) |
| 08:14:01 | captain_proton | nope |
| 08:14:05 | vogon_jeltz | :? |
| 08:14:08 | vogon_jeltz | :/, even |
| 08:14:12 | captain_proton | its not running anything |
| 08:14:16 | vogon_jeltz | ahh |
| 08:14:16 | captain_proton | it just asks for a password |
| 08:14:23 | vogon_jeltz | shrugs and goes back to work |
| 08:14:35 | captain_proton | then if the pass is correct, it runs something |
| 08:14:40 | vogon_jeltz | yeah, I know |
| 08:15:00 | vogon_jeltz | got it |
| 08:21:06 | captain_proton | gotten 6 yet? |
| 08:21:09 | vogon_jeltz | nah |
| 08:21:21 | vogon_jeltz | the usual IFS trickery doesn't seem to work :/ |
| 08:21:48 | vogon_jeltz | got it |
| 08:21:51 | vogon_jeltz | stupid subshell |
| 08:21:54 | captain_proton | did you learn *nothing* from hackerslab? :) |
| 08:22:07 | captain_proton | now help me figure out this library thang |
| 08:22:23 | vogon_jeltz | hehe |
| 08:23:12 | captain_proton | wait i think i got it |
| 08:23:26 | vogon_jeltz | wth is eww.so? |
| 08:23:37 | vogon_jeltz | points out that strings is your friend |
| 08:24:46 | captain_proton | argh - how do you make .so's? |
| 08:24:53 | vogon_jeltz | haha |
| 08:25:09 | vogon_jeltz | I AM MR SMARTEY-MAN LUNIX HAX0R!!! |
| 08:25:24 | captain_proton | who is? |
| 08:25:37 | vogon_jeltz | hehe |
| 08:25:42 | vogon_jeltz | is channeling jeffk |
| 08:25:50 | captain_proton | ah ha |
| 08:25:56 | captain_proton | do you do this often? |
| 08:26:06 | vogon_jeltz | anyway, a shared library is one that exports no main() and is compiled with the options -fPIC and -DPIC |
| 08:26:24 | vogon_jeltz | and another one which I will not tell you |
| 08:29:04 | vogon_jeltz | hmm |
| 08:29:24 | vogon_jeltz | hmmmmmmm |
| 08:29:57 | captain_proton | hahahaha |
| 08:30:17 | vogon_jeltz | tries unleashing the Aleph One shellcode on userinfo |
| 08:30:38 | vogon_jeltz | :/ |
| 08:30:46 | captain_proton | LOL |
| 08:30:50 | vogon_jeltz | w0t? |
| 08:31:01 | captain_proton | there's more to hacking than IFS & buffer overflows |
| 08:31:04 | vogon_jeltz | I know |
| 08:32:14 | captain_proton | did what I was saying about libs have no effect on you? |
| 08:32:39 | vogon_jeltz | dude, I get the usual suspects out of the way before I expend effort |
| 08:32:54 | captain_proton | lol |
| 08:34:02 | vogon_jeltz | hmm... chroot is missing... there's another chance gone :/ |
| 08:34:27 | captain_proton | you'd be screwed on glibc stuff if you did that |
| 08:34:36 | vogon_jeltz | hehe |
| 08:34:46 | vogon_jeltz | not necessarily |
| 08:35:19 | captain_proton | not if you copied it, but then you'd hit quota |
| 08:35:23 | vogon_jeltz | :) |
| 08:36:03 | vogon_jeltz | lemme points out that it only dynamically links 3 libs |
| 08:36:16 | vogon_jeltz | libc is only 1 meg |
| 08:36:25 | vogon_jeltz | libdl is only 10 k |
| 08:36:39 | vogon_jeltz | and ld-linux is 79 K |
| 08:37:08 | captain_proton | hmmm this one is confusing |
| 08:37:09 | captain_proton | can |
| 08:37:10 | captain_proton | can |
| 08:37:12 | captain_proton | argh |
| 08:37:20 | vogon_jeltz | you hit 7 yet/ |
| 08:37:21 | vogon_jeltz | ? |
| 08:37:25 | captain_proton | can't find a setuid newbie8 binary... |
| 08:37:30 | vogon_jeltz | hahah |
| 08:37:35 | captain_proton | thas what the 'hahahaha' was about |
| 08:44:01 | vogon_jeltz | doh! |
| 08:44:11 | vogon_jeltz | :P |
| 08:45:22 | vogon_jeltz | I hacked up a replacement lib, but it's not working right :/ |
| 08:45:55 | captain_proton | compiled it correctly? your instructions were faulty |
| 08:46:00 | vogon_jeltz | hehe |
| 08:46:16 | vogon_jeltz | that's 'cause I didn't give you the whole deal when it came to the instructions :) |
| 08:47:11 | captain_proton | you need 2 compile statements |
| 09:19:21 | vogon_jeltz | can't figure out how to get the program to call his hacked-up getpwnam() |
| 09:19:36 | vogon_jeltz | yes, I've tried LD_PRELOAD, and no, it doesn't load :/ |
| 09:19:42 | captain_proton | the program doesn't call getpwnam :) |
| 09:19:49 | vogon_jeltz | but the shared lib *does* :) |
| 09:19:51 | captain_proton | try replacing user_info |
| 09:20:03 | vogon_jeltz | already tried... couldn't get the types right |
| 09:20:27 | captain_proton | don't need any types at all |
| 09:20:30 | captain_proton | these are *symbols* |
| 09:20:43 | vogon_jeltz | I *understand that* |
| 09:20:58 | captain_proton | have you tried using -p <path> at all? |
| 09:21:02 | vogon_jeltz | yes |
| 09:21:24 | captain_proton | so you see how easy this really is? |
| 09:21:30 | captain_proton | user_info is part of eww.so |
| 09:21:31 | vogon_jeltz | no, not really |
| 09:21:36 | vogon_jeltz | yeah, I understand that |
| 09:21:44 | captain_proton | write yourself a new eww.so |
| 09:21:47 | vogon_jeltz | but I don't know how it's called (argument types) |
| 09:21:59 | captain_proton | you don't need any arguments |
| 09:22:06 | captain_proton | symbols, remember? |
| 09:22:15 | vogon_jeltz | uhm... |
| 09:22:16 | captain_proton | its all just pointers on a stack |
| 09:22:28 | captain_proton | doesn't matter if your function *reads* from the stack |
| 09:22:32 | vogon_jeltz | yeah... |
| 09:23:19 | vogon_jeltz | geez... wasn't using the right source :P |
| 09:23:55 | captain_proton | roflmao |
| 09:24:07 | captain_proton | i've given up on 7 for tonight |
| 09:24:08 | vogon_jeltz | I had the damn thing an hour ago, but I accidentally compiled the wrong file |
| 09:24:14 | captain_proton | i think it has something to do with a port |
| 09:24:21 | vogon_jeltz | hehe |
| 09:27:40 | vogon_jeltz | hahahah |
| 09:27:53 | vogon_jeltz | freaking moron who wrote 1.c couldn't even figure out why his proggie was segfaulting |
| 09:27:53 | captain_proton | got newbie7? |
| 09:27:56 | vogon_jeltz | no |
| 09:28:23 | captain_proton | no? you wouldn't see 1.c if you hadn't :) |
| 09:28:29 | vogon_jeltz | heheh |
| 09:28:32 | vogon_jeltz | yeah, I got it |
| 09:28:42 | vogon_jeltz | is sleepy |
| 09:29:05 | captain_proton | me too |
| 09:35:32 | vogon_jeltz | ya know, it might be easier to do this if we had a description of the problem |
| 09:35:59 | captain_proton | yeah it would be |
| 09:36:22 | captain_proton | how about this: tomorrow we can descend upon their IRC channel and ask a question or two |
| 09:36:28 | vogon_jeltz | hehe |
| 11:38:02 | vogon_jeltz | is away: new book: "Astrodaing the Whole Epson for Dyslexics" |
| 19:54:48 | vogon_jeltz | is back (gone 08:16:42) |
| 23:55:38 | captain_proton | hey everybody |
| 23:55:53 | vogon_jeltz | hi |
| 23:56:20 | captain_proton | hows it going vogon_jeltz? |
| 23:56:26 | captain_proton | solved that problem yet? |
| 23:56:34 | vogon_jeltz | nah, haven't bothered |