Domain name resolver
10 points Easy

Check IP of your favorite domain.

nc rivit.dev 10004

task.tar.gz
Flag
Binary ยท Rivit
230 solves
Rating 4.67
5
4
3
2
1
Must solve to rate

Discussion

avatar
Ibrahim_reza

3 months ago

Reply Share

If anybody face extreme problem !!! 1. use reverse engineering tool (Ghidra or binary ninja) , 2. After analyzing you will see , The program use the system call and use our input as it's argument/param without sanity check . For this , " command injection " can be applied 3. So , after nc in linux cat the flag ( ; cat flag.txt )

0
avatar
gowthambalastark

4 months ago

Reply Share
  1. For those who want a hint, Decompile the source code you will find what is happening under the hood,
  2. See what command it's trying to execute and learn about that command.
  3. After finding the command, try how can you inject commands with that
0
avatar
ArminVanMont

6 months ago

Reply Share

eazy if somebody needs help just let me know

0
avatar
4k4nes

8 months ago

Reply Share
Protected
0
avatar
blackm4c

11 months ago

Reply Share

Ghidra :)

0
avatar
Vrydh

1 year ago

Reply Share

Just read the decompile

0
avatar
Bittz

1 year ago

Reply Share

the solution is soo dumb.. i was stuck at this challenge for 3 days.. thought of some complex stuff.. in 10 point challenge.. but no.. the answer is simple and very very dumb.. anyone wanting hints... well.. no hints do it yourself.. its very easy

btw.. nice challenge.. researched and learnt a lot.. Thankyou..

1
avatar
electrum21

1 year ago

Reply Share

hint please

0
avatar
Mike_Root

1 year ago

Reply Share

Good challenge. For beginners: Whenever you are given executable, you must take a close look at it with proper tools...

1
avatar
Angela_22

1 year ago

Reply Share

I'm really stuck here tho, can u pls provide more hint about proper tool? I used wine but couldn't run it

0
avatar
Mike_Root

1 year ago

Reply Share

There is another tool mentioned below, also you should definitely have IDA in your toolkit.

0