Admin ServicePWN 未解决
分数:
0
金币:
0
题目作者:
未知
一 血:
admin889
一血奖励:
0金币
解 决:
1
提 示:
描 述:
Notes:
- Leak everything using
/proc/self/maps
. - Use
updateConfig
function to gain an arbitrary write. There is no upper bound check for the index. - Write a shellcode/gadget in executeable area.
- Toggle the execution of the "backupCall" by writing "backup: 1" to the config.
- Execute backup.
其 他:
下载