½Ã½ºÅÛ ÇØÅ·

 1574, 1/79 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   h@cking2013
   dummy¿¡ ´ëÇØ Áú¹®ÇÕ´Ï´Ù!

http://www.hackerschool.org/HS_Boards/zboard.php?id=QNA_system&no=1778 [º¹»ç]


'ÀÌ ¶§, int µ¥ÀÌÅÍÇüÀº 4¹ÙÀÌÆ®À̱⠶§¹®¿¡, ½ºÅà µ¥ÀÌÅÍÀÇ ±âº» Å©±âÀÎ 4¹ÙÀÌÆ®¿Í µ¿ÀÏÇÕ´Ï´Ù. ±×·¸´Ù¸é ¸¸¾à 1¹ÙÀÌÆ®ÀÎ char µ¥ÀÌÅÍÇüÀ̳ª 2¹ÙÀÌÆ®ÀÎ short µ¥ÀÌÅÍÇüÀÌ Áö¿ªº¯¼ö·Î ¼±¾ðµÉ °æ¿ì¿£ ½ºÅÿ¡ ¾î¶»°Ô ÀúÀåÀÌ µÉ±î¿ä? ÀÌ·² °æ¿ì¿£ 4¹ÙÀÌÆ®¿¡¼­ ºÎÁ·ÇÑ ¹ÙÀÌÆ®¸¸Å­ÀÇ µ¥ÀÌÅÍ°¡ ÀÓÀÇ·Î Ãß°¡µË´Ï´Ù. Áï, 1¹ÙÀÌÆ®ÀÎ char µ¥ÀÌÅÍÇüÀÏ °æ¿ì¿£ ºÎÁ·ÇÑ 3¹ÙÀÌÆ®°¡, ±×¸®°í 2¹ÙÀÌÆ®ÀÎ short µ¥ÀÌÅÍÇüÀÏ °æ¿ì¿£ ºÎÁ·ÇÑ 2¹ÙÀÌÆ®°¡ Ãß°¡µË´Ï´Ù.'

¿©±â±îÁö°¡ ÇØÄ¿½ºÄð ¿ÕÃʺ¸ bof¹®¼­¿¡ ³ª¿Â ³»¿ëÀÌ°í

¿Í¿ìÇØÄ¿ÀÇ ´Þ°í³ª°¡ ÀÛ¼ºÇϽŠ¹®¼­¿¡µµ '½ºÅà µ¥ÀÌÅÍÀÇ ±âº» Å©±â´Â 4¹ÙÀÌÆ®À̱⠶§¹®¿¡ 4ÀÇ ¹è¼ö·Î ÇÒ´çµÈ´Ù, ÇÏÁö¸¸ gccÀÇ ¹öÀü¿¡ µû¶ó ´Ù¸£±âµµ ÇÏ´Ù'´Â ¶æÀ¸·Î ³ª¿Í Àִµ¥¿ä,
dummy¿¡ °üÇÑ ±Ã±ÝÁõÀÌ »ý°Ü Á÷Á¢ ¾Æ·¡ ¼Ò½ºÄڵ带 ÄÄÆÄÀÏÇØ ½ÇÇà½ÃÅ°ÀÚ
-------------------------dummy.c-----------------------------
#include <stdio.h>
int main()
{
char a;
char b;
printf("%p\n",&a);
printf("%p\n",&b);
return 0;
}
-----------------------------------------------------------------
0xbffff827
0xbffff826
-----------------------------------------------------------------
a¿Í bÀÇ ÁÖ¼Ò°¡ 1¹Û¿¡ Â÷ÀÌ°¡ ³ªÁö ¾Ê½À´Ï´Ù.
1.Àú´Â À§ÀÇ µÎ ¹®¼­¸¦ Àаí dummy¶ó´Â °ÍÀº ²À ºÙ¾î¾ß ÇÏ´Â °ÍÀ̶ó°í »ý°¢ÇÏ¿´´Âµ¥, Á÷Á¢ ½ÇÇèÇغ» °á°ú dummy°¡ ºÙÁö ¾Ê¾Ò½À´Ï´Ù. ±×·¸´Ù¸é 4¹ÙÀÌÆ®º¸´Ù ÀÛÀº µ¥ÀÌÅÍÇüÀ¸·Î Áö¿ªº¯¼ö¸¦ ¸¸µé¾úÀ»¶§ ÄÄÆÄÀÏ·¯¿¡ µû¶ó dummy°¡ ºÙ´Â ÀÌÀ¯´Â ¹«¾ùÀΰ¡¿ä?
2.µ¥ÀÌÅÍ, bss, Èü ¼¼±×¸ÕÆ®¿¡¼­µµ dummy°¡ ºÙ³ª¿ä?

  Hit : 3012     Date : 2015/02/26 01:08



    
h@cking2013 ¸Þ¸ð¸® ´ýÇÁ¶°º¸´Ï±î Á¦°¡ À߸ø ÀÌÇØÇß´ø°Í °°³×¿ä 2015/02/26  
1574   pwnable.kr echo1 Áú¹®2 (½ºÆ÷ ÁÖÀÇ)[2]     turttle2s
10/05 1230
1573   LOB GATE¹®Á¦ Ç®¸é¼­ ±Ã±ÝÇÑÁ¡[3]     hackxx123
08/24 914
1572   libc°ü·Ã - 2[5]     lMaxl04
08/24 875
1571   ASLRÀÌ °É·ÁÀÖÀ»¶§ ret¿¡ ROPÀ¸·Î jmp %espÀ» »ç¿ëÇÑ °æ¿ì.[3]     lMaxl04
06/29 1139
1570   ¸®¸ðÆ® ȯ°æ¿¡¼­ÀÇ ½ºÅà ÁÖ¼Ò È®ÀÎ ¹æ¹ýÀÌ ±Ã±ÝÇÕ´Ï´Ù.[2]     lMaxl04
06/16 934
1569   ÇØÅ· ÇÁ¸®¼­¹ö ¾ø¾îÁ³³ª¿ä?[1]     terfkim
04/15 1715
1568   ½ºÅÿ¡ µ¥ÀÌÅÍ ³ÖÀ» ¶§ SIGSEGV[4]     turttle2s
02/04 1447
1567   pwnable.kr echo1 Áú¹®[2]     turttle2s
06/17 1723
1566   ROP strcpy °ü·Ã Áú¹®ÀÔ´Ï´Ù.[3]     heeyoung0511
06/16 1569
1565   Level2 -> Level3 ¿¡¼­ vi¿Í /usr/bin/EditorÀÇ Â÷ÀÌ[2]     hyemin1826
07/18 1818
1564   Trainer3 ftz.hackerschool.org È£½ºÆ® Á¢¼Ó ºÒ°¡[1]     hyemin1826
07/18 3211
1563   dllÀÎÁ§¼Ç ½ÇÇèÁß Áú¹® µå¸³´Ï´Ù.[1]     kkk477
05/31 1840
1562   ÆÐŶ º¹È£È­¸¦ ¸¶½ºÅÍ ÇÏ·Á¸é ¾î¶² °úÁ¤ÀÌ ÀÖ¾î¾ßÇϳª¿ä?     sa0814
04/01 1686
1561   »ç±â[2]     jas08
03/31 1980
1560   ½Ã½ºÅÛ ÄÝÀÌ °¡´ÉÇÑ ¸Þ¸ð¸® ¿µ¿ª°ú ºÒ°¡´ÉÇÑ ¸Þ¸ð¸® ¿µ¿ªÀÌ Á¸ÀçÇϳª¿ä?     ocal
03/30 1724
1559   pwntools »ç¿ë½Ã¿Í ±âº» socket ¸ðµâ ÀÌ¿ë½Ã Â÷ÀÌ?[4]     ocal
01/09 2258
1558   lob level19(nightmare) °ü·ÃÁú¹®[1]     dnjsdnwja
12/18 1735
1557   ftz level2 Áú¹®ÀÖ½À´Ï´Ù[1]     kihyun1998
12/13 1824
1556   ftz level2¹ø Ǫ´Âµ¥¿ä ±ÇÇÑÀÌ...     kihyun1998
12/06 1702
1555   ½Ã½ºÅÛÇØÅ·ÇÒ¶§ [3]     thsrhkdwns
12/05 2180
1 [2][3][4][5][6][7][8][9][10]..[79]

Copyright 1999-2024 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org