bof

[bof]

Summary

• Stack Overflow

Background Knowledges

• gets() doesn't check a boundary of input array.

Tools

• pwndbg
• ghidra
• ROPgadget

Description

• Soooooooooo simple binary

  • 
  • 

• Exploit

  • ROP Chain

    ---------------- <- return address
     pop rdi ; ret
    ----------------
     0xdeadbeef
    ---------------- 
     & get_flag()
    ---------------- 
    

  • ex.py

• utflag{thanks_for_the_string_!!!!!!}