5

shanguwei · May 22, 2024 · d8f8324 · d8f8324
1 parent 7341791
commit d8f8324
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/docs/Pwn/gdb.md b/docs/Pwn/gdb.md
@@ -71,7 +71,9 @@ gcc -O1 main.c -o main.out
 gcc 1.c -no-pie -z execstack -fno-stack-protector -o task1
 ```
 
+正常空间0x50 + 填充rbp 0x8 + 恶意指令或地址
 
+payload = b's'*0x58 + backdoor_address
 
 ## 验证调试
 

diff --git a/docs/Pwn/hello.md b/docs/Pwn/hello.md
@@ -25,6 +25,22 @@ pip3 install pwntools
 
 [下载链接](https://github.com/tower111/pwn-change-libc)
 
+```bash
+git clone https://github.com/tower111/pwn-change-libc
+cd pwn-change-libc
+python3 get_env.py
+sudo ln -s <clibc的绝对路径> /usr/bin/clibc
+```
+
+使用方法：
+
+```bash
+#clibc 目标文件 目标版本
+clibc pwn 2.21
+```
+
+
+
 ## IDA
 
 ## pwndbg