How to exploit this:

#include <stdio.h>

int main(int argc,char *argv[]) { char command[511]; fgets(command,510,stdin); system(command); //execlp(,"less",NULL); return 0;//this is really easy. }

I tried doing a BoF attack. perl -e'print "A" x 516' and incressed each time but I could never get a segfault. Is there another way to exploit this code?

think big. printing out something like 1024 chars.

Touch me baby :p

Doing 1024 I got "Syntax error: EOF in backquote substitution"

XD i just realised ur using fgets() to parse the inpt. notice the 510? Thats the number of bytes that will be transfered. So that code is secure.

Well, apart from the fact that you're passing user input directly to system(3), but I presume it was for example purposes only.