Question: The assigned task for this exercise is to simply crash fhttpd with an attack payload. However, it is possible to inject code via the payload

The assigned task for this exercise is to simply crash fhttpd with an attack payload. However, it is possible to inject code via the payload and take over the application. Since fhttpd runs with root privileges, you can execute anything on the system if you manage to take over the program. For extra credit, do #1 and/or #2 below, and then #3:
Create and successfully execute a remote execution exploit using the vulnerability in fhttpd. This could be as simple as writing a file to the system.
0wn the box: Create a remote shell you can send commands to, add a login user with root access, or some other reliable remote access facility.
Draft a short writeup describing the steps you took to create the exploit and what you learned in the process.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Programming Questions!