Comments (1)
在SROP技术中 讲得非常详细 但是有一点内容有所纰漏
signal 机制第3点: signal handler 返回后,内核为执行 sigreturn 系统调用,为该进程恢复之前保存的上下文,其中包括将所有压入的寄存器,重新 pop 回对应的寄存器,最后恢复进程的执行。其中,32 位的 sigreturn 的调用号为 77,64 位的系统调用号为 15。
这里 32位的sigreturn调用号应该是0x77(119) , 64 位的系统调用号为 15(0xf) 还请完善下
内容参考 https://www.slideshare.net/AngelBoy1/sigreturn-ori PPT第11页
感谢, 已经修正: fix
from ctf-wiki.
Related Issues (20)
- typo? HOT 1
- 本地部署后搜索引擎不起作用, 我看线上版本也不支持模糊查询,是我操作有问题还是本身就不支持 HOT 1
- 在crypto部分的一个typo HOT 2
- basic-rop存在不适用的情况。ret2shellcode在ubuntu 20.04.1上运行时,.bss段无x权限。 HOT 4
- Uninitialized Storage Pointer数组部分存在问题 HOT 2
- mkdocs 本地部署问题 HOT 1
- 位于 android/basic_operating_mechanism/java_layer/smali/smali 的 typo HOT 1
- gif.md在官网上仍存在markdown渲染错误问题 HOT 3
- 基本ROP中的例子ret2shellode二进制文件bss段不可执行,和例子中描述的不符。 HOT 1
- Android Dex结构体定义不准确
- windows stack overflow example lose a include declaration
- page losts in stack overflow. HOT 2
- Android 中方法的描述是不有错误
- 关于Pwn中Format String章节里的一些问题。 HOT 2
- 堆利用的 UAF 一节中表述是否存在错误? HOT 2
- TypeError: can only concatenate str (not "bytes") to str HOT 3
- 扩展维纳攻击 三个小解密指数的情况 向量B写错了? HOT 2
- Pull下来的Docker镜像中,哪里存放着ctf-wiki的文件?
- 添加一个指定端口号的方法来避免端口占用
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ctf-wiki.