Send a link

ANSI C


How to cheat suid()

cheat-suid.c
vi cheat.c
main(){setuid(0);seteuid(0);setgid(0);setegid(0);system("id");}
gcc -o cheat cheat.c
./cheat
uid=0(root) gid=0(wheel) groups=0(wheel)

Cheating suid() in a more elaborate way

cheat-suid-plus.c
int main(int argc, char* argv[[]) {
  char args[[300];
  char final[[300];
  int i;
  args[[0]='\0';
  for (i=1;i < argc;i++) {
    sprintf(args,"%s %s",args,argv[[i]);
  }
  sprintf(final,"%s",args);
  printf("Running ->%s\n",final);

  setuid(0);seteuid(0);setgid(0);setegid(0);
  system(final);
}