pwn learning (1) Attack and defense world-hello_pwn

Download link:

https://adworld.xctf.org.cn/challenges/list

Main function analysis:

 Looking at the positions of the read data and the compared data, you will find the problem. They are next to each other and differ by 4 bytes.

According to the main() function, we can know that dword_60106C is 'nuaa'. Pay attention to the little-endian storage (in memory), that is:

000000000060106C→‘a’

000000000060106D→‘a’

000000000060106E→‘u’

000000000060106F→‘n’,

0000000000601068 is the starting position, you can fill in the data in the middle as you like

Learn about .bss: Understand the role of the .bss section in one article_What is stored in the bss section_jxryj's blog-CSDN blog

Final result: cyberpeace{f178d34680e278da75e4b40e9921da97}

Guess you like

Origin blog.csdn.net/m0_66039322/article/details/132502738
pwn