From 11797735a0e730bbd87383503ca4b31eb21fdcf6 Mon Sep 17 00:00:00 2001 From: gio-del <91754361+gio-del@users.noreply.github.com> Date: Tue, 2 Jan 2024 21:41:20 +0100 Subject: [PATCH] typo gimme3bytes --- writeups/shellcode/gimme3bytes/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/writeups/shellcode/gimme3bytes/README.md b/writeups/shellcode/gimme3bytes/README.md index 4fa5d47..f484b3e 100644 --- a/writeups/shellcode/gimme3bytes/README.md +++ b/writeups/shellcode/gimme3bytes/README.md @@ -11,7 +11,7 @@ pop rdx syscall ``` -- RAX: already set to 0x0a (syscall number for `read`) +- RAX: already set to 0x0 (syscall number for `read`) - RDI: already set to 0x0 (stdin) - RSI: already set to the buffer address - RDX: set using `pop rdx`. Why so? Because at that point the stack contains a large number that can be used as a buffer size