ret2libcPWN 未解决
分数:
0
金币:
0
题目作者:
未知
一 血:
admin889
一血奖励:
0金币
解 决:
1
提 示:
描 述:
Notes:
- Sending exactly 80 bytes + new line(which gets will replace with a null byte) will result in a null byte written in the least significant byte of the saved ECX value on stack.
- Include a rop chain in the 80 bytes. To increase success rate, use a ret slide with a short rop chain.
- You have a chance for the stack pivoting at the end of the
mainfunction to land on your payload & you execute a ROP chain.
其 他:
下载
