http://www.hackerschool.org/HS_Boards/zboard.php?id=QNA_programming&no=1120 [º¹»ç]
===============================================================================
>ÀÎÅͳݿ¡¼ ÀڷḦ ã´Ù°¡ ÇÑ »çÀÌÆ®¿¡¼ ¼ÐÄÚµå ÀÛ¼º ¹®¼¸¦ º¸´Ù°¡ ÀÌÇØ°¡ Àß
>¾ÈµÇ´Â ºÎºÐÀÌ ÀÖ¾î¼.. Áú¹®µå¸³´Ï´Ù.
>
>¹Ø¿¡ ºÎºÐ ³»¿ëÁß¿¡
>
>0x80481e2 <main+6>: movl $0x808b228,0xfffffff8(%ebp)
>name[0] = "/bin/sh"; %ebp¸¦ ±âÁØÀ¸·Î -8¹ÙÀÌÆ® À§Ä¡¿¡ ¹®ÀÚ¿ÀÇ ÁÖ¼Ò¸¦ ³ÖÀ½.
>
>ebp¸¦ ±âÁØÀ¸·Î -8¹ÙÀÌÆ® À§Ä¡¿¡ ¹®ÀÚ¿ÀÇ ÁÖ¼Ò¸¦ ³ÖÀº´Ù°í Çߴµ¥ ebp¸¦ ±âÁØÀ¸·Î
>-8¹ÙÀÌÆ® À§Ä¡ °è»êÀº ¾î¶»°Ô Çϳª¿©?
>
>ÀÌ¿ÕÀÌ¸é ½ºÅÿ¡ ½×ÀÌ´Â °úÁ¤ÀÌ ±Ã±ÝÇÕ´Ï´Ù ^^
>
===============================================================================
¸Þ¸ð¸®ÀÇ ¸ð¾çÀÌ ´ÙÀ½°ú °°´Ù°í ÇÒ ¶§..
---------------------------------------------------
³·Àº ÁÖ¼Ò [0x00000000 ~~~ 0xffffffff] ³ôÀº ÁÖ¼Ò
---------------------------------------------------
½ºÅÃÀº À§ÀÇ ³ôÀº ÁÖ¼Ò¿¡¼ ³·Àº ÁÖ¼Ò ¹æÇâÀ¸·Î »õ·Î¿î °ªÀÌ Ãß°¡µË´Ï´Ù.
---------------------------------------------------
³·Àº ÁÖ¼Ò [0x00000000 ~~~ 0xffffffff] ³ôÀº ÁÖ¼Ò
---------------------------------------------------
<-- ½ºÅÿ¡ °ªÀÌ Ãß°¡µÇ´Â(½×ÀÌ´Â) ¹æÇâ
¸¸¾à¿¡ ¾î¶² a¶ó´Â ÇÔ¼ö°¡ È£ÃâµÇ¸é,
[·ÎÄú¯¼ön]...[·ÎÄú¯¼ö2][·ÎÄú¯¼ö1][SFP][¸®ÅϾîµå·¹½º][ÀÎÀÚ1][ÀÎÀÚ2]...[ÀÎÀÚn]
<------------------------------------------------------------------------------
¼ø¼·Î °ªÀÌ Ãß°¡µË´Ï´Ù.
ebp¶õ, ·ÎÄà º¯¼ö ȤÀº ÇÔ¼ö ÀÎÀÚÀÇ À§Ä¡¸¦ ÂüÁ¶Çϱâ À§ÇØ Á¤ÇسõÀº ½ºÅà ³»ÀÇ
±âÁØÁ¡ÀÌ ÀúÀåµÈ ·¹Áö½ºÅÍÀÔ´Ï´Ù.
ebp´Â À§ ±×¸²ÀÇ SFP°¡ Ãß°¡µÈ Á÷ÈÄ¿¡ ¼³Á¤µÇ±â ¶§¹®¿¡ SFPÀÇ ÁÖ¼Ò¿Í µ¿ÀÏÇÕ´Ï´Ù.
¸¸¾à ÇÔ¼öÀÇ ÀÎÀÚ1À» ÂüÁ¶ÇÏ°í ½Í´Ù¸é, ebp+8·Î ÂüÁ¶ÇÒ ¼ö ÀÖ½À´Ï´Ù.
ÀÌ´Â À§ ±×¸²À» º¸¸é ½±°Ô ÀÌÇØÇÏ½Ç ¼ö ÀÖÀ» °Ì´Ï´Ù.
À̹ø¿£ ·ÎÄà º¯¼ö1À» ÂüÁ¶ÇÏ°í ½Í´Ù¸é ebp-4·Î ÂüÁ¶ÇÒ ¼ö ÀÖ°ÚÁÒ.
(°¢ º¯¼ö°¡ 4¹ÙÀÌÆ®¶ó°í °¡Á¤)
ÀÌ·± ¹æ½ÄÀ¸·Î °è»êÇغ¸¸é, Áú¹®ÇϽŠebp-8ÀÇ À§Ä¡´Â ·ÎÄà º¯¼ö2 ºÎºÐÀÓÀ»
¾Ë ¼ö ÀÖ½À´Ï´Ù.
Âü°í·Î ÇØ´ç ½©Äڵ忡¼± ebp-8¿¡¼ ebp-4±îÁöÀÇ ÁÖ¼Ò¸¦ "/bin/sh" ¹®ÀÚ¿°ú
0 °ªÀ» ÀúÀåÇϱâ À§ÇÑ ÀÓÀÇÀÇ ¿ëµµ·Î »ç¿ëÇÏ°í ÀÖ½À´Ï´Ù.
|
Hit : 3015 Date : 2006/06/20 11:47
|