EasyCTF 2017-doubly_dangerous

Open the main file: Insert picture description here
Insert picture description here
You can see that the logic is to make v5 equal to 11.28125.
Insert picture description here

浮点指令
fld 类似于 push
fstp 类似于 pop
fadd 类似于 add
fucomip 类似于 cmp

Insert picture description here

Insert picture description here
This is very clear. Just change the 48AC to 11.28125. Jump to the hexadecimal position to
Insert picture description here
construct the payload from this:
Insert picture description here

Published 125 original articles · Like 31 · Visits 60,000+

Guess you like

Origin blog.csdn.net/Fiverya/article/details/104956350