摘要: # ciscn_2019_s_3 ## 0x01 64位开启NX ![image-20230808184656119](https://raw.githubusercontent.com/lmarch2/images/main/typora/202308081846151.png) 注意程序直接使用 阅读全文
posted @ 2023-08-08 20:56 lmarch2 阅读(298) 评论(1) 推荐(1)
摘要: C++STL 学习笔记 STL补充 List 链表 list<int> mylist = { }链表定义和初始化 void push_front(const T & val) 将 val 插入链表最前面 void pop_front() 删除链表最前面的元素 list.push_back() 增加一 阅读全文
posted @ 2023-08-08 17:29 lmarch2 阅读(54) 评论(0) 推荐(0)
摘要: # jarvisoj_fm BUUCTF pwn 考点:格式化字符串漏洞 ![image-20230807232152466](https://raw.githubusercontent.com/lmarch2/images/main/typora/202308072321504.png) 格式化字 阅读全文
posted @ 2023-08-08 13:10 lmarch2 阅读(97) 评论(0) 推荐(0)
摘要: # [HarekazeCTF2019]baby_rop2 64位的ret2libc3 ## 0x01 ![image-20230808095301880](https://raw.githubusercontent.com/lmarch2/images/main/typora/20230808095 阅读全文
posted @ 2023-08-08 13:07 lmarch2 阅读(241) 评论(0) 推荐(0)
摘要: # bjdctf_2020_babyrop ## 0x01 注意这题位64位。32位和64位传参有区别 ![image-20230807231036816](https://raw.githubusercontent.com/lmarch2/images/main/typora/2023080723 阅读全文
posted @ 2023-08-08 13:07 lmarch2 阅读(106) 评论(0) 推荐(0)
摘要: # pwn2_sctf_2016 ## 0x01 32位开NX泄露libc ![image-20230808104509112](https://raw.githubusercontent.com/lmarch2/images/main/typora/202308081045150.png) 注意g 阅读全文
posted @ 2023-08-08 13:05 lmarch2 阅读(213) 评论(0) 推荐(0)
摘要: # ret2libc3 ctf-wiki ret2libc3 考点:栈溢出rop ### 0x01 file checksec —— 32-bit 开NX ![](https://raw.githubusercontent.com/lmarch2/images/main/typora/2023080 阅读全文
posted @ 2023-08-08 12:55 lmarch2 阅读(219) 评论(0) 推荐(0)
摘要: # 铁人三项(第五赛区)_2018_rop 经典ret2libc3 ![image-20230807225923356](https://raw.githubusercontent.com/lmarch2/images/main/typora/202308072259415.png) exp ``` 阅读全文
posted @ 2023-08-08 12:49 lmarch2 阅读(59) 评论(0) 推荐(0)
摘要: # ciscn_2019_es_2 ## 0x01 32位开NX,有system函数,但是需要传入binsh。 ![image-20230808113405078](https://raw.githubusercontent.com/lmarch2/images/main/typora/202308 阅读全文
posted @ 2023-08-08 12:46 lmarch2 阅读(82) 评论(0) 推荐(0)