[随波逐流]CTF Flags

随波逐流信息安全网 www.1o1o.xyz

   [随波逐流]CTF Flags

软件版本:v1.0.0   数据版本: v20260526
返    回

pwn347

 广告模块
ID: 5275
标题: pwn347
描述: arm-32 rop * ## remote * 35 openat(AT_FDCWD,"/lib/libc.so.6",O_RDONLY|O_CLOEXEC) = 3 * 35 read(3,0xfffef1a0,512) = 512 * 35 _llseek(3,0,1317852,0xfffee420,SEEK_SET) = 0 * 35 read(3,0xfffee438,2880) = 2880 * 35 _llseek(3,0,1314348,0xfffee3e8,SEEK_SET) = 0 * 35 read(3,0xfffee400,44) = 44 * 35 fstat64(3,0xfffef0c8) = 0 * 35 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0xff7b1000 * 35 mmap2(NULL,1389928,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0xff65d000 * 35 mprotect(0xff79b000,65536,PROT_NONE) = 0 * 35 mmap2(0xff7ab000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x13e) = 0x * ff7ab000 * 35 mmap2(0xff7ae000,9576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0xff7a * e000 * 35 close(3) = 0 * 35 mprotect(0xff7ab000,8192,PROT_READ) = 0 * 35 mprotect(0x00020000,4096,PROT_READ) = 0 * 35 mprotect(0xff7ed000,4096,PROT_READ) = 0
类型: PWN入门.ARM-PWN
网站: ctfshow
题目链接: https://ctf.show/api/v1/challenges/4459
赛事: ARM-PWN
年度: None
Flag值: pop {r3, pc}; mov r0, r3; bl puts 泄露libc后执行system("/bin/sh")
writeup: https://idocdown.com/app/articles/blogs/detail/16409
答案错误,我要更正