97, 1/5 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   turttle2s
   º¯¼ö ¼±¾ð½Ã ½ºÅÿ¡¼­ÀÇ À§Ä¡

http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=119 [º¹»ç]


char str[100];
char a = 'A';

printf("a = %c\n",a);
strcpy(str, argv[1]);
printf("a = %c\n",a);


BOF ¿¬½ÀÇϰíÀÖ´Â ÇÞº´¾Æ¸® ÀÔ´Ï´Ù.
ÀÌ·¸°Ô str[100]À» ¸ÕÀú ¼±¾ðÇϰí a¸¦ ¼±¾ðÇÏ¸é ½ºÅÿ¡¼­ aÀÇ À§Ä¡°¡ strÁÖ¼ÒºÁ ³·Àº °÷¿¡ À§Ä¡Çϴ°ɷΠ¾Ë°íÀÖ½À´Ï´Ù. FTZ ¼­¹ö¿¡¼­ ÇÁ·Î±×·¥ ¸¸µç ÈÄ gdb·Î µð½º¾î¼Àºí Çߴµ¥ º¯¼ö aÀÇ À§Ä¡°¡ [ebp - 121] À̰í strÀÇ ½ÃÀÛ ÁÖ¼Ò°¡ [ebp - 120]À¸·Î ³ª¿À´Âµ¥ ¿Ö ÀÌ·¸°Ô µÇ´Â°ÇÁö ¸ð¸£°Ú½À´Ï´Ù. ( ¸Þ¸ð¸® º¸È£±â¹ýÀº ´Ù ÇØÁ¦Çß½À´Ï´Ù. )

  Hit : 2828     Date : 2018/11/13 01:39



    
gihacker ½ºÅà ÀÚ¶ó´Â ¹æÇâ¿¡ ´ëÇØ¼­ °í·ÁÇØº¸½Ã±â ¹Ù¶ø´Ï´Ù 2018/11/13  
turttle2s gihacker
¸ÕÀú ¼±¾ðÇÑ str¿¡ ´ëÇØ¼­ °ø°£À» È®º¸ÇØ ÁÖ´Â°Í °°Àºµ¥.. Çò°¥¸®´Â°Ô ´Ù¸¥ ¼­¹ö¿¡¼­ ¶È°°Àº ¼Ò½º·Î ¶È°°ÀÌ ÄÄÆÄÀÏ Çߴµ¥ ¿©±â¼± º¯¼ö a¿¡ ´ëÇÑ ÀÚ¸®¸¦ ¸ÕÀú Áֳ׿ä. ( [rbp - 0x1] )

64ºñÆ®¿¡¼± ´Ù¸£°Ô ÀÛµ¿Çϳª¿ä?
2018/11/15  
±ºÀÎ ¤¤ ¾ÆÅ°ÅØÃĶû ¹«°üÇÏ°Ô ÄÄÆÄÀÏ·¯ÀÇ Â÷ÀÌÀϰ̴ϴÙ. 2018/11/15  
turttle2s ¤¤ ±×·¸±º¿ä. °¨»çÇÕ´Ï´Ù 2018/11/15  
somass ¾ÆÅ°ÅØÃĶû ¹«°üÇÏ°Ô ÄÄÆÄÀÏ·¯ÀÇ Â÷ÀÌÀϰ̴ϴÙ. 2022/09/16