22050, 1/1103 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   ocal
   pwnable.kr starcraft ¸¶¹«¸®¸¦ ¾î¶»°Ô ÇØ¾ß ÇÒ±î¿ä?

http://www.hackerschool.org/HS_Boards/zboard.php?id=Free_Board&no=37361 [º¹»ç]


pwnable.kr starcraft ¹®Á¦¿¡ °üÇÑ Áú¹®ÀÔ´Ï´Ù.

ÀÏ´Ü checksec·Î °Ë»çµÇ´Â º¸È£±â¹ýÀº ´Ù °É·ÁÀÖ½À´Ï´Ù.(RELRO, Canary, NX, PIE)

ÀÌ·± »óȲ¿¡¼­ Á¤¼®Àº libc base address¸¦ µý ÈÄ¿¡ rip hijackÀ» Çؼ­ ¸ÅÁ÷ °¡Á¬À» ³ÖÀ¸¸é µÇ°ÚÁö¿ä. ±×·¡¼­ ±×·¸°Ô Çߴµ¥...

libc base leak, rip hijack, one gadgetÀ» Á¶ÇÕÇÏ·Á°í ¼¼°³ ´Ù ¾Ë¾Æ³Â½À´Ï´Ù.

±×·±µ¥ one gadgetÀÇ constraint¸¦ ¸¸Á·À» ¾ÈÇϳ׿ä. ¾î¶»°Ô ÇØ¾ß ÇÒÁö ¸ð¸£°Ú½À´Ï´Ù.

Ȥ½Ã ÀÌ ¹®Á¦ Ǫ¼Ì°Å³ª ¾Æ´Ï¸é ¾ÆÀ̵ð¾î ÀÖÀ¸½Å ºÐ Á¶¾ðÀ» Á» ÇØÁÖ½Ã¸é °¨»çÇÏ°Ú½À´Ï´Ù.

(cf) °¡Á¬ÀÇ Á¦ÇÑ »çÇ×Àº À̸¦Å׸é ÀÌ·±°Ì´Ï´Ù.
(ex) rax == NULL
(ex) [rsp+0x30] == NULL

  Hit : 5152     Date : 2020/06/26 03:21



    
ocal Ç®¾ú½À´Ï´Ù... 2020/06/27  
jason102938 Çæ µü ¸·È÷½Å °÷¿¡¼­ Àúµµ ¸·Çû´Âµ¥,,, one gadgetÀÇ Á¦¾à»çÇ×À» ¸¸Á·¸øÇؼ­ ´Ù¸¥ ºÎºÐÀ» º¸°í ÀÖ½À´Ï´Ù.
Ȥ½Ã ¾î¶»°Ô Ǫ¼Ì´ÂÁö Á¶¾ðÁ» ÇØÁֽǼö ÀÖÀ»±î¿ä?
2021/06/03  
ocal ¾ÈµÇ¸é µÇ°Ô ÇØ¾ß ÇÕ´Ï´Ù 2022/02/08  
     [°øÁö]ÇØÄ¿½ºÄð ÀÌ¿ë¼öÄ¢ 2021/04/11 ¼öÁ¤ÆÇ [51] ÇѽÂÀç 01/05 9904
22049   Ç϶ó´Â ÇØÅ·Àº ¾È ÇÏ°í -part13-     ÇØÅ·ÀßÇÏ°í½Í´Ù
02/28 43
22048   Ç϶ó´Â ÇØÅ·Àº ¾È ÇÏ°í -part11-     ÇØÅ·ÀßÇÏ°í½Í´Ù
02/28 18
22047   Ç϶ó´Â ÇØÅ·Àº ¾È ÇÏ°í -part10-     ÇØÅ·ÀßÇÏ°í½Í´Ù
02/27 39
22046   ±êÇãºê ¹è¿ï ¶§°¡ ¿Ô³× -_-;;;     ÇØÅ·ÀßÇÏ°í½Í´Ù
02/18 100
22045   ÇØÅ· °ú¿ÜÇÕ´Ï´Ù     hins13
02/10 407
22044   ¹éÅ×½ºÆà °á°ú     ÇØÅ·ÀßÇÏ°í½Í´Ù
02/07 104
22043   Ä¿³Îµå¶óÀ̺긦 ¾î¼Àºí¸®¾î·Î ©¼öÀִ°¡??     hacs98
02/03 97
22042   ¸®´ª½ºÀÇ ¸Å·Â     ÇØÅ·ÀßÇÏ°í½Í´Ù
01/18 361
22041   Äɺó ¹ÌÆ®´ÐÀÌ ÇÑ ¸»ÀÌ ¸ÂÀ½     ÇØÅ·ÀßÇÏ°í½Í´Ù
01/16 398
22040   Ç϶ó´Â ÇØÅ·Àº ¾È ÇÏ°í -part9-[2]     ÇØÅ·ÀßÇÏ°í½Í´Ù
12/08 714
22039   Ç϶ó´Â ÇØÅ·Àº ¾È ÇÏ°í -part8-     ÇØÅ·ÀßÇÏ°í½Í´Ù
12/08 463
22038   Ç϶ó´Â ÇØÅ·Àº ¾È ÇÏ°í -part7-     ÇØÅ·ÀßÇÏ°í½Í´Ù
12/08 540
22037   Ç϶ó´Â ÇØÅ·Àº ¾È ÇÏ°í -part6-     ÇØÅ·ÀßÇÏ°í½Í´Ù
12/08 531
22036   À½¾ÇÀåºñ ´ë½Å ´Ù¸¥°É Áú·¶...     ÇØÅ·ÀßÇÏ°í½Í´Ù
12/03 516
22035   ·Îµå¸Ê[2]     ÇØÅ·ÀßÇÏ°í½Í´Ù
12/03 544
22034   ÇØÅ·º¸¾È °ú¿Ü ÁøÇàÇÕ´Ï´Ù.[1]     sysadm
12/03 579
22033   ·¦ ³ìÀ½ ÇÏ·Á°í Çϴµ­...     ÇØÅ·ÀßÇÏ°í½Í´Ù
11/22 504
22032   Drunken Tiger... Drunken Ka0r1...     ÇØÅ·ÀßÇÏ°í½Í´Ù
11/22 488
22031   À©µµ¿ì Ãë¾àÁ¡ ¿¬±¸Çã½Ç ¹é¼ö ¸ðÁý[1]     µ¹¸Íµ¹¸Í
11/10 722
1 [2][3][4][5][6][7][8][9][10]..[1103]

Copyright 1999-2025 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org