Nebula

11 Apr 2020 in VULNHUB

Nebula takes the participant through a variety of common weaknesses and vulnerabilities in linux.

Level00:

This level requires you to find a Set of User ID program that will run as the flag00 account.

find / -perm -400 2>/dev/null | less

Level01:

#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include <sys/types.h>
#include <stdio.h>

int main(int argc, char **argv, char **envp)
{
  gid_t gid;
  uid_t uid;
  gid = getegid();
  uid = geteuid();

  setresgid(gid, gid, gid);
  setresuid(uid, uid, uid);

  system("/usr/bin/env echo and now what?");
}

We can go

```bash