On: Hack your way through Stripe's Capture the Flag

[turkeygizzard]

I'm entirely new to hacking, and as such I'm struggling with level 1. I looked up the system() exploit, and I've managed to compile my own date program, but when I try to read the password from level02, I'm told I don't have permission. Could you point me in the right direction?

[robbles → turkeygizzard]

Try to figure out how you could trick a setuid program into running your date program instead of the real one.

[olalonde → turkeygizzard]

Yeah that's not part of the test. Just use your level2 password for the http auth.