I'm entirely new to hacking, and as such I'm struggling with level 1. I looked up the system() exploit, and I've managed to compile my own date program, but when I try to read the password from level02, I'm told I don't have permission. Could you point me in the right direction?
Try to figure out how you could trick a setuid program into running your date program instead of the real one.
Yeah that's not part of the test. Just use your level2 password for the http auth.
thanks! I got 1 and 2 before I saw this, but we'll see how I do on 3.