VNCTF2022_Pwn_clear_got_WP

VNCTF2022_Pwn_clear_got_WP

检查文件

RELRO半开，没有canary，开NX，没开PIE。

IDA查看题给elf文件

int __cdecl main(int argc, const char **argv, const char **envp)
{
   
  char buf[92]; // [rsp+0h] [rbp-60h] BYREF
  int v5; // [rsp+5Ch] [rbp-4h]

  init(argc, argv, envp);
  memset(buf, 0, 0x50uLL);
  puts("Welcome to VNCTF! This is a easy competition.///");
  read(0, buf, 0x100uLL);
  v5 = (int)