LEVEL5 (orc -> wolfman) : egghunter + bufferhunter
wolfman.c #include #include extern char **environ; main(int argc, char *argv[]) { char buffer[40]; int i; if(argc < 2){ printf("argv error\n"); exit(0); } // egghunter for(i=0; environ[i]; i++) memset(environ[i], 0, strlen(environ[i])); if(argv[1][47] != '\xbf') { printf("stack is still your friend.\n"); exit(0); } strcpy(buffer, argv[1]); printf("%s\n", buffer); // buffer hunter memset(buffer, ..
SYSTEM/bof
2013. 7. 19. 13:15
최근에 올라온 글
최근에 달린 댓글
- Total
- Today
- Yesterday