search

Chaos-xBug / gitalk

4 stars 0 forks source link

NYNUCTF-PWN-WP | Clerk.Max(well); #68

Open Chaos-xBug opened 2 years ago

Chaos-xBug commented 2 years ago

https://lht.wiki/20220126-ctf-NYNUCTF-PWN-WP/

NYNUCTF-PWN-WPHello_Pwn题目描述连接方式：nc ctf.nynusec.com 端口 WP hello_pwn2题目描述开始吧 WPIDA read函数是明显溢出点 只要在输入时填充进足够的垃圾数据，从unk_601068一直覆盖到dword_60106C，再让dword_60106C == 1853186401 成立，就可以执行sub_400686函数 EXP12345