Bad Login
Download the
badlogin program. It works sort of like the login
program that controls access to UNIX systems, except that instead of
actually granting or denying access to anything, it just prints messages,
and also it is terrible.
When you run badlogin
, it will prompt you for a username; use
your actual username from your Chemeketa email (e.g. I would use
rsurton
). Then, it will prompt you for a password. Your task is to
figure out what password to enter to get a message saying you have been
granted access. As with the previous assignment, just getting the right
answer isn't enough; I expect you to explain how you found the answer
and include snippets from using gdb to gather evidence. Put together a
document that includes your username and shows what password will grant
you access, and how you know. When you are done, export your document
as PDF and submit it to elearn.
There is another program included in the download, named extrabadlogin
.
It is not extra bad, so much as it is worth extra because some techniques
that will solve badlogin
do not work on extrabadlogin
. You only need
to solve badlogin
for "Yes" credit, but solving both puzzles with
a good writeup is worth "Wow!" credit.