#PWN
[BUUCTF]others_babystack
main函数如下:
__int64 __fastcall main(__int64 a1, char **a2, char **a3)
{
char
...
[gyctf2020]borrowstack
main函数如下:
int __cdecl main(int argc, const char **argv, const char **envp)
{
...
[bjdctf2020]babyrop2
普通的ret2libc,开启了canary保护。
...
[BUUCTF]picoctf_2018_rop chain
32位,vuln()存在栈溢出,获取flag时,在flag()中存在判定,flag()代码如下:
int __cdecl flag(int a1)
{
...
[BUGKU]PWN-canary
checksec:
Arch: amd64-64-littleRELRO: Partial RELROStack: Canary foundNX: NX
...
[Black Watch 入群题]PWN
vul_function():
ssize_t vul_function()
{
size_t v0; // eax
size_t v1; //
...
[BUUCTF]ez_pz_hackover_2016
checksec:
Arch: i386-32-little
RELRO: Full RELRO
Stack:
...