archivehttps://archive-w.netlify.app/corner/ctf/Recent content on archiveHugozh-CNcontact@wtfu.site (eli_w)contact@wtfu.site (eli_w)<link>https://archive-w.netlify.app/corner/ctf/stack-overflow/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><author>contact@wtfu.site (eli_w)</author><guid>https://archive-w.netlify.app/corner/ctf/stack-overflow/</guid><description><ul> <li> <h2 id="introstack-overflow--classic-stack-overflow--csof"> Intro(stack-overflow | Classic Stack Overflow | csof) <a class="anchor" href="#introstack-overflow--classic-stack-overflow--csof">#</a> </h2> <p class="warn">hello stack-overflow</p> <div class="outer yosemite"><div class="dot red"></div><div class="dot amber"></div><div class="dot green"></div></div> <div class="code-toolbar"><pre data-lang="sh" data-line="" class="language-sh line-numbers" style="max-height: none"><code class="language-sh">vscode ➜ .../c_learning/ctf/stack-overflow/04 (master) $ gcc -v Using built-in specs. COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-linux-gnu/13/lto-wrapper OFFLOAD_TARGET_NAMES=nvptx-none:amdgcn-amdhsa OFFLOAD_TARGET_DEFAULT=1 Target: x86_64-linux-gnu Configured with: ../src/configure -v --with-pkgversion='Ubuntu 13.3.0-6ubuntu2~24.04.1' --with-bugurl=file:///usr/share/doc/gcc-13/README.Bugs --enable-languages=c,ada,c++,go,d,fortran,objc,obj-c++,m2 --prefix=/usr --with-gcc-major-version-only --program-suffix=-13 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/libexec --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-libstdcxx-backtrace --enable-gnu-unique-object --disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib --enable-libphobos-checking=release --with-target-system-zlib=auto --enable-objc-gc=auto --enable-multiarch --disable-werror --enable-cet --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none=/build/gcc-13-EldibY/gcc-13-13.3.0/debian/tmp-nvptx/usr,amdgcn-amdhsa=/build/gcc-13-EldibY/gcc-13-13.3.0/debian/tmp-gcn/usr --enable-offload-defaulted --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu --with-build-config=bootstrap-lto-lean --enable-link-serialization=2 Thread model: posix Supported LTO compression algorithms: zlib zstd gcc version 13.3.0 (Ubuntu 13.3.0-6ubuntu2~24.04.1) vscode ➜ .../c_learning/ctf/stack-overflow/04 (master) $ dpkg -l | grep gcc-multilib ii gcc-multilib 4:13.2.0-7ubuntu1 amd64 GNU C compiler (multilib files) </code></pre></div> <ul> <li> <h3 id="栈溢出利用原理演示"> 栈溢出利用原理演示 <a class="anchor" href="#%e6%a0%88%e6%ba%a2%e5%87%ba%e5%88%a9%e7%94%a8%e5%8e%9f%e7%90%86%e6%bc%94%e7%a4%ba">#</a> </h3> <p>主要通过对用户输入不做边界检查，导致覆盖调用函数之后该执行指令的地址。可以构造用户输入以及要写入的地址，达到控制程序的目的。</p></description></item></channel></rss>