I know I will not understand it.
but thanks anyway.
It'll be helpful in future.
DO NOT DEAL WITH THIS MEMBER
Another great antagonism tutorial, I remember when you were just starting these tutorials. Nice to see you haven't stopped.
DO NOT DEAL WITH THIS MEMBER
You know how to make my happy!
Great tutorial man!
(May 26, 2013 07:54 AM)๖ۣۣۜۜFear Wrote: Another great antagonism tutorial, I remember when you were just starting these tutorials. Nice to see you haven't stopped.
I've only made my new two tuts because of special occasion that will be announced very soon.
Good job on all those awesome tutorials sir ;)
(May 27, 2013 01:40 PM)Antagonism Wrote: Good job on all those awesome tutorials sir ;)
Wait.. you are Antagonism.. this is very weird lol.
(May 27, 2013 01:42 PM)-๖ۣۜDivine- Wrote: Wait.. you are Antagonism.. this is very weird lol.
Really 😝
It's funny to have all those tutorials of a group having my name ^^
Wow, that's a pretty amazing tutorial, good work.
Really nice tutorial, how long did it take you to learn all this?
In the land of the blind, the one-eyed man is king
Blood makes you related, but loyalty makes you family
(May 27, 2013 05:35 PM)SIM-1073426 Wrote: Really nice tutorial, how long did it take you to learn all this?
This is simple and shouldn't take more than a day to learn.
(May 25, 2013 07:59 PM)Pendragon Wrote: You missed someone, dookiehead.
Vehla
Truestory There Lol
Gratz On The 2 Years
Hiring PHP developers does not contribute to the quota of employees with disabilities.
![[Image: lPQX27G.png]](https://i.imgur.com/lPQX27G.png)
(May 17, 2015 08:27 PM)♕ Pimp ♕ Wrote: you're a waste of my time and giving me cancer.
A very nice tutorial, as soon as I get on my computer I will do this.
Thank you very much for your contribution to hf, because I think almost everything is too easy on hf, except ur tuts which are
adventurous for me :)
thanks Divine.
i'm a newcomer, when reading this tutorial, i puzzled about the trick:
./vuln `python -c 'print "\x24\xa0\x04\x08"+"\x26\xa0\x04\x08"'`%65055x%8\$hn%49624x%9\$hn
when printf "AAAA...", the stack offset is 8. acctually it is the offset of the variable buf. am i right?
but why we should use the offset 8?
i search the printf, and couldn't find the introduce about the ‘$’ .
what is meaning about this symbol? and what's the relationship between ‘$’ and the "\x24\xa0\x04\x08" when using "\n" as the format?
i know when there are no additional arguments following formats, the printf will write the length to the stack, but the static var is not at the stack.why write the code as above, the value of var could be change?
sorry, maybe too many question.
but i'm really looking forward to your reply, thanks!
nice tut yo pointer varible is what it is.
(Jun 1, 2013 04:57 AM)Kluge7 Wrote: thanks Divine.
i'm a newcomer, when reading this tutorial, i puzzled about the trick:
./vuln `python -c 'print "\x24\xa0\x04\x08"+"\x26\xa0\x04\x08"'`%65055x%8\$hn%49624x%9\$hn
when printf "AAAA...", the stack offset is 8. acctually it is the offset of the variable buf. am i right?
but why we should use the offset 8?
i search the printf, and couldn't find the introduce about the ‘$’ .
what is meaning about this symbol? and what's the relationship between ‘$’ and the "\x24\xa0\x04\x08" when using "\n" as the format?
i know when there are no additional arguments following formats, the printf will write the length to the stack, but the static var is not at the stack.why write the code as above, the value of var could be change?
sorry, maybe too many question.
but i'm really looking forward to your reply, thanks!
Quote:We must see how deep in $esp our buffer lies.
Eight is the offset to reach our buffer.
Quote:Very nice. Also, %X$s, where X is a number, reads Xth argument from the stack.Therefore, %3$s would read third argument as a string.
Same concept. %8\$hn
Also, we are not using \n. That would mean new line. We're using %n.
|
