http://www.hackerschool.org/HS_Boards/zboard.php?id=Free_Lectures&no=499 [º¹»ç]
./attackme `perl -e 'print "a"x256'`
a¸¦ ù¹ø¤Š ÀÎÀÚ·Î 256 ¹ø ÀÔ·ÂÇØÁÖ´Â È¿°ú
./attackme `perl -e 'print "a"x256,"\xff\xff\xff\xff"'`
./attackme `perl -e 'print "a"x256,"\xff\xff\xff\xff","\xff\xff\xff\xff"'` (ÀÌ·±½ÄÀ¸·Î ¿¬´Þ¾Æ °¡´É)
a¸¦ ù¹ø¤Š ÀÎÀÚ·Î 256¹ø ³Ö¾îÁÖ°í µÚ¿¡ \xff\xff\xff\xff \xff\xff\xff\xff ¸¦ ¿¬´Þ¾Æ ÀÔ·ÂÇØÁÖ´Â È¿°ú
(perl -e 'print "A"x256';cat)|./attackme
½ÇÇàµÈÈÄ a ¸¦ 256 ¹ø ÀÔ·ÂÇØÁØ È¿°ú
(printf "`perl -e 'print "a"x268'`\xff\xff\xff\xff";cat)|./attackme
a ¸¦ 268 ¹ø ÀÔ·ÂÇÏ°í \xff\xff\xff\xff ¸¦ ÀÔ·ÂÇÑ È¿°ú
(perl -e 'print "A"x43';perl -e 'print "\xff\xff\xff\xff"';cat)|./attackme
ÇÁ·Î±×·¥À» ½ÇÇàÇÑÈÄ a¸¦ 43 ¹ø ÀÔ·ÂÇÏ°í \xff\xff\xff\xff ¸¦ ÀÔ·ÂÇØÁÖ´Â È¿°ú
°øÅë
perl -e 'system "./attackme","aaaaaaaaaaaaaaaaaaaa\xff\xff\xff\xff\xff"'
aaaaaaaaaaaaaaaaa\xff\xff\xff\xff ÀÔ·ÂÇÑ È¿°ú
(printf "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA";cat)|./attackme
(printf "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\xff\xff\xff\xff";cat)|./attackme
°øÅë ¾Æ¹«¶§³ª »ç¿ëÀÌ °¡´ÉÇÏ´Ù AAAAAAAAAAAAA ÀÔ·ÂÇØÁÖ´Â È¿°ú
Ʋ¸°Á¡ ÀÖÀ¸¸é ÁöÀûÇØÁÖ¼¼¿ë.
|
Hit : 12134 Date : 2006/03/11 08:52
|