pwn细节 | NoOne

0%

pwn细节

Posted on 2019-09-25 Edited on 2020-08-18 In bin , pwn , 栈 , linux栈 Views: Views: Valine:
Symbols count in article: 229 Reading time ≈ 1 mins.

system(“/bin/sh”)
system(“sh”)
system(“/bin/bash”)
system(“bash”)
system(“$0”)
system(“x86_64”)
system(“i386”)

若还不成，可试试在参数后面加;#
比如system(“/bin/sh;#”)
这是由于函数的特殊性，有些函数会截断特殊字符

本文作者：NoOne
本文地址： https://noonegroup.xyz/posts/aaf99047/
版权声明：转载请注明出处！