22002, 1/1101 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   ocal
   pwnable.kr starcraft ¸¶¹«¸®¸¦ ¾î¶»°Ô ÇØ¾ß ÇÒ±î¿ä?

http://www.hackerschool.org/HS_Boards/zboard.php?id=Free_Board&no=37361 [º¹»ç]


pwnable.kr starcraft ¹®Á¦¿¡ °üÇÑ Áú¹®ÀÔ´Ï´Ù.

ÀÏ´Ü checksec·Î °Ë»çµÇ´Â º¸È£±â¹ýÀº ´Ù °É·ÁÀÖ½À´Ï´Ù.(RELRO, Canary, NX, PIE)

ÀÌ·± »óȲ¿¡¼­ Á¤¼®Àº libc base address¸¦ µý ÈÄ¿¡ rip hijackÀ» Çؼ­ ¸ÅÁ÷ °¡Á¬À» ³ÖÀ¸¸é µÇ°ÚÁö¿ä. ±×·¡¼­ ±×·¸°Ô Çߴµ¥...

libc base leak, rip hijack, one gadgetÀ» Á¶ÇÕÇÏ·Á°í ¼¼°³ ´Ù ¾Ë¾Æ³Â½À´Ï´Ù.

±×·±µ¥ one gadgetÀÇ constraint¸¦ ¸¸Á·À» ¾ÈÇϳ׿ä. ¾î¶»°Ô ÇØ¾ß ÇÒÁö ¸ð¸£°Ú½À´Ï´Ù.

Ȥ½Ã ÀÌ ¹®Á¦ Ǫ¼Ì°Å³ª ¾Æ´Ï¸é ¾ÆÀ̵ð¾î ÀÖÀ¸½Å ºÐ Á¶¾ðÀ» Á» ÇØÁÖ½Ã¸é °¨»çÇÏ°Ú½À´Ï´Ù.

(cf) °¡Á¬ÀÇ Á¦ÇÑ »çÇ×Àº À̸¦Å׸é ÀÌ·±°Ì´Ï´Ù.
(ex) rax == NULL
(ex) [rsp+0x30] == NULL

  Hit : 4069     Date : 2020/06/26 03:21



    
ocal Ç®¾ú½À´Ï´Ù... 2020/06/27  
jason102938 Çæ µü ¸·È÷½Å °÷¿¡¼­ Àúµµ ¸·Çû´Âµ¥,,, one gadgetÀÇ Á¦¾à»çÇ×À» ¸¸Á·¸øÇؼ­ ´Ù¸¥ ºÎºÐÀ» º¸°í ÀÖ½À´Ï´Ù.
Ȥ½Ã ¾î¶»°Ô Ǫ¼Ì´ÂÁö Á¶¾ðÁ» ÇØÁֽǼö ÀÖÀ»±î¿ä?
2021/06/03  
ocal ¾ÈµÇ¸é µÇ°Ô ÇØ¾ß ÇÕ´Ï´Ù 2022/02/08  
     [°øÁö]ÇØÄ¿½ºÄð ÀÌ¿ë¼öÄ¢ 2021/04/11 ¼öÁ¤ÆÇ [43] ÇѽÂÀç 01/05 8037
22001   2024 ÇÙÅ׿ ¼¼Á¾ ±¹Á¦ »çÀ̹öº¸¾È À§Å© ¾È³»[1]     2024ÇÙÅ׿¼¼Á¾
03/25 35
22000   µð½ºÄÚµå ¾ÆÀ̵ð·Îµµ »ó´ë¹æ Á¤º¸¸¦ ¾Ë¼ö ÀÖÀ»±î¿ä?[3]     eun7594
03/17 104
21999   [±¸ÀÎ] VB,VMP ¸®¹ö½Ì °¡´ÉÇϽźРã½À´Ï´Ù.[2]     tachys
03/12 95
21998   ÀúÁ» µµ¿ÍÁÖ¼¼¿ä[1]     since3004
02/21 193
21997   ÇÁ·¢ 71È£ CFP °ø°³µÇ¾ú½À´Ï´Ù[8]    New! jdo
02/04 250
21996   ÇØÅ· ¹è¿ì°í ½ÍÀºµ¥ ³Ê¹« ¾î·Æ³×¿ä Áú¹®ÇÒ°Ô ÀÖ½À´Ï´Ù.     vbnm11
01/28 569
21995   ¾È³çÇϼ¼¿ä~ ÇØÅ·¿¡ ´ëÇؼ­ ¹°¾îº¸°í½Í¾î¼­ ¸îÀÚ ¿Ã¸³´Ï´Ù.     whddnrdl1318
01/23 391
21994   ½Ã½ºÅÛÇØÅ· °ú¿Ü ¸ðÁýÇÕ´Ï´Ù. [4]     osor2
01/13 451
21993   À¥ÇØÅ· / ÇØÅ· ½ßÃʺ¸ ¹× Ãʺ¸ ±âÃÊ´Ü°èºÎÅÍ °ú¿Ü Çص帳´Ï´Ù~[6]     °íÇϸ°
01/07 545
21992   Çѱ¹ ÇØÄ¿´Ôµé ¸ðµÎ ÁÁÀº ÇÑ ÇØ ÈûÂ÷°Ô ½ÃÀÛÇÏ½Ã±æ ¹Ù¶ø´Ï´Ù. ^^[3]     jdo
01/03 329
21991   ÇØÅ· º¸¾È °ü·Ã °ú¿Ü¸¦ ÁøÇàÇÕ´Ï´Ù.     bluewindsoul
12/26 322
21990   [ (ÇØÅ· ÇÐȸÁö) º¸¾È Ãë¾à¼º ¿¬±¸] Ãâ½Ã![5]     jdo
12/20 533
21989   À¥ ÇØÅ· ¼±»ý´Ô ±¸ÇÝ´Ï´Ù.      ms24
12/15 333
21988   ¾È³çÇϼ¼¿ä ÇØÅ· °ú¿Ü¼±»ý´Ô ¸ð¼Å¿ä     dltjwns1
12/05 376
21987   (±¸ÀÎ) À¥ÇØÅ· ¼±»ý´Ô ¸ð¼Åº¾´Ï´Ù !     mooa1
10/17 624
21986   ÇØÅ· °øºÎ ¼ø¼­Á» ¾Ë·ÁÁÖ¼¼¿ä.. ÀÌÁ¦ ¸· ÀÔ¹® Çß½À´Ï´Ù... [2]     walker
10/11 1086
21985   ÇØÄ𼥿¡¼­ ÆǸÅÇÏ´Â ±³Àç PDF¸¦ ¾Ë°í½Í½À´Ï´Ù.     fishersofmen
09/21 616
21984   ÇØÄð¼¥ µé¾î°¡ÁöÁö°¡ ¾Ê³×¿ä     fishersofmen
09/21 529
21983   ¾È³çÇϼ¼¿ä ÇØÅ·Æı«ÀÇ ±¤ÇРå¿¡ ³ª¿Â´Â ¿¹Á¦¼Ò½ºÄÚµåÀε¥ ½ÇÇàÀÌ ¾ÈµÇ´Â ÀÌÀ¯¸¦ ¸ð¸£°Ú½À´Ï´Ù.     fishersofmen
09/21 400
1 [2][3][4][5][6][7][8][9][10]..[1101]

Copyright 1999-2024 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org