DASCTF X GFCTF 2024|四月开启第一局🚩[PWN] wp(详解)1.dynamic_but_static题目保护情况64位程序,没有开canary和pie保护,got表可改64位ida载入看一下沙箱保护,不能直接execve('/bin/sh')获取shell,也就是需要orw形式读取flag栈上有溢出,好在都没有过滤这些gadget和地址🚀思路:1.通过栈溢出泄露出libc地址...
#!/usr/bin/env python3 # Date: 2022-10-24 16:33:10 # Link: https://github.com/RoderickChan/pwncli # Usage: # Debug : python3 exp.py debug elf-file-path -t -b malloc # Remote: python3 exp.py remote elf-file-path ip:port # debug in Ubuntu 22.04 from pwncli import * cli_...