Lab 3 — ret2libc + ASLR Bypass via Info Leak
Combining NX and ASLR bypass: leak puts@GOT to recover the libc base, recompute offsets at runtime, then ret2system for a shell.
2022-03-14$ filter --tag pwntools
2 posts tagged #pwntools.
Stack Canary Bypass via Format String Leak
Leaking the stack canary through a format-string information disclosure, then overwriting the return address while keeping the canary intact.
2022-03-14