Skip to content

Latest commit

 

History

History
31 lines (26 loc) · 546 Bytes

File metadata and controls

31 lines (26 loc) · 546 Bytes

exp5: aslr + PIE -> leak + ret2libc

nc 

Binary protections

➜ checksec ./exp42
    Arch:     amd64-64-little
    RELRO:    Partial RELRO
    Stack:    Canary found
    NX:       NX enabled
    PIE:      No PIE (0x400000)

Some vuln classes

* buffer overflows
* format string
* integer overflow / rounding errors / NaN
* race conditions
* use-after-free
* nullbytes
* uninitialized memory
* softlinks
* type confusion
* injections
* path traversal
* deserialization