Skip to content

Commit

Permalink
修改对 "地址只有低位的 16 bit 不同" 错误描述
Browse files Browse the repository at this point in the history
  • Loading branch information
WinMin committed Apr 7, 2024
1 parent 2085859 commit 69888b9
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -861,7 +861,7 @@ pwndbg> x/10i (0x0A3E+0x55dc43694000)
0x55dc43694a52: mov rbp,rsp
0x55dc43694a55: sub rsp,0x10
```
可以发现, 此时的返回地址与 get shell 函数的地址只有低位的 16 bit 不同, 如果覆写低 16 bit 为 `0x?A3E`, 就有一定的几率 get shell
可以发现, 此时的返回地址与 get shell 函数的地址只有低位的 8 bit 不同, 如果覆写低 8 bit 为 `0x?A3E`, 就有一定的几率 get shell

最终的脚本如下:
```python
Expand Down

0 comments on commit 69888b9

Please sign in to comment.