pwnable.kr [Toddler's Bottle] -fd
2017-03-11 21:35
260 查看
最近由前辈推荐,去到http://pwnable.kr/开始人生中第一次正经的刷题。 Toddler's Bottle.... :(
第一题fd主要是为了介绍玩法
ssh fd@pwnable.kr -p2222 (pw:guest)
源码如下:
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
char buf[32];
int main(int argc, char* argv[], char* envp[]){
if(argc<2){
printf("pass argv[1] a number\n");
return 0;
}
int fd = atoi( argv[1] ) - 0x1234;
int len = 0;
len = read(fd, buf, 32);
if(!strcmp("LETMEWIN\n", buf)){
printf("good job :)\n");
system("/bin/cat flag");
exit(0);
}
printf("learn about Linux file IO\n");
return 0;
}
输入参数必须大于等于2,argv[0]指向程序运行的全路径名,之后从argv[1]开始即为实际传入的参数。
File descriptor 0为stdin,0x1234=4660。
构造输入:
fd@ubuntu:~$ ./fd 4660
LETMEWIN
good job :)
mommy! I think I know what a file descriptor is!!
第一题fd主要是为了介绍玩法
ssh fd@pwnable.kr -p2222 (pw:guest)
源码如下:
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
char buf[32];
int main(int argc, char* argv[], char* envp[]){
if(argc<2){
printf("pass argv[1] a number\n");
return 0;
}
int fd = atoi( argv[1] ) - 0x1234;
int len = 0;
len = read(fd, buf, 32);
if(!strcmp("LETMEWIN\n", buf)){
printf("good job :)\n");
system("/bin/cat flag");
exit(0);
}
printf("learn about Linux file IO\n");
return 0;
}
输入参数必须大于等于2,argv[0]指向程序运行的全路径名,之后从argv[1]开始即为实际传入的参数。
File descriptor 0为stdin,0x1234=4660。
构造输入:
fd@ubuntu:~$ ./fd 4660
LETMEWIN
good job :)
mommy! I think I know what a file descriptor is!!
相关文章推荐
- pwnable.kr [Toddler's Bottle] - collision
- pwnable.kr [Toddler's Bottle] - lotto
- pwnable.kr [Toddler's Bottle] - bof
- pwnable.kr [Toddler's Bottle] - shellshock
- pwnable.kr [Toddler's Bottle] - cmd1
- pwnable.kr [Toddler's Bottle] - passcode
- pwnable.kr [Toddler's Bottle] - flag
- pwnable.kr [Toddler's Bottle] - coin1
- pwnable.kr [Toddler's Bottle] - codemap
- pwnable 笔记 Toddler's Bottle - fd
- pwnable.kr [Toddler's Bottle] - cmd2
- pwnable.kr [Toddler's Bottle] - random
- pwnable.kr [Toddler's Bottle] - uaf
- pwnable.kr [Toddler's Bottle] - input
- pwnable.kr [Toddler's Bottle] - blackjack
- pwnable.kr [Toddler's Bottle] - leg
- pwnable.kr [Toddler's Bottle] - mistake
- pwnable 笔记 Toddler's Bottle - random
- pwnable 笔记 Toddler's Bottle - lotto
- pwnable 笔记 Toddler's Bottle - input