LEVEL15 (giant -> assassin) : no stack, no RTL
assassin.c #include #include main(int argc, char *argv[]) { char buffer[40]; if(argc < 2){ printf("argv error\n"); exit(0); } if(argv[1][47] == '\xbf') { printf("stack retbayed you!\n"); exit(0); } if(argv[1][47] == '\x40') { printf("library retbayed you, too!!\n"); exit(0); } strcpy(buffer, argv[1]); printf("%s\n", buffer); // buffer+sfp hunter memset(buffer, 0, 44); } assassin은 ret의 주소가 \xbf와 ..
SYSTEM/bof
2013. 7. 19. 14:06
최근에 올라온 글
최근에 달린 댓글
- Total
- Today
- Yesterday