[ vuln ] - [ Buffer overflow, bof, ]

pwngdb> disass main

Dump of assembler code for function main:
 0x00005555555546e6 <+0>: push rbp ;  프롤로그 - 함수의 시작에 항상 위치. ...[1]
 0x00005555555546e7 <+1>: mov rbp,rsp ; 프롤로그.
 0x00005555555546ea <+4>: sub rsp,0x90 ; 0x90만큼의 공간(144만큼) 생성. ...[2]
//…
 0x0000555555554734 <+78>: mov rsi,rdx
 0x0000555555554737 <+81>: mov rdi,rax
 0x000055555555473a <+84>: call 0x55555555468a <vuln> ; vuln이라는 함수 호출...[3] - [6]
 0x000055555555473f <+89>: lea rdi,[rip+0x9e] # 0x5555555547e4 ; 
 0x0000555555554746 <+96>: call 0x555555554550 <puts@plt>
 0x000055555555474b <+101>: mov eax,0x0
 0x0000555555554750 <+106>: leave
=> 0x0000555555554751 <+107>: ret 
End of assembler dump.


Dump of assembler code for function vuln: ; vuln함수! ...[4]
//…
 0x00005555555546df <+85>: add rsp,0x28
 0x00005555555546e3 <+89>: pop rbx
 0x00005555555546e4 <+90>: pop rbp
 0x00005555555546e5 <+91>: ret ; ret == JMP RSP 리턴 주소!...[5]

 

./vuln `perl -e 'print "X"x144'`  # == ./vuln `perl -e 'print"XXXXXXXXXXX ~144개~ XXXXXXXXXXXX"'`