From 541a979646a781eded04045ae4927e46c032ba9d Mon Sep 17 00:00:00 2001 From: Valentin Brandl Date: Mon, 16 Dec 2019 11:38:01 +0100 Subject: [PATCH] Realistic stack layouts --- work/dot/before.dot | 4 ++-- work/dot/call.dot | 13 +++++++------ work/dot/exploit.dot | 13 +++++++------ 3 files changed, 16 insertions(+), 14 deletions(-) diff --git a/work/dot/before.dot b/work/dot/before.dot index 63b3926..209295a 100644 --- a/work/dot/before.dot +++ b/work/dot/before.dot @@ -3,8 +3,8 @@ digraph G { shape="plaintext" label=< - - + +
data10xFE<- SP
data10xFF<- BP
argc0xFE← SP (main)
argv0xFF← BP (main)
>]; } diff --git a/work/dot/call.dot b/work/dot/call.dot index 5ddb455..341886c 100644 --- a/work/dot/call.dot +++ b/work/dot/call.dot @@ -3,13 +3,14 @@ digraph G { shape="plaintext" label=< - - + + + - - - - + + + +
data20xF9<- SP
data20xFA<- BP
buf0xC8← SP (vuln)
buf...
buf0xFA← BP (vuln)
[old IP]0xFB
*0xFE0xFC
*0xFF0xFD
data10xFE
data10xFF
[BP (main)]0xFC
[*input]0xFD
argc0xFE
argv0xFF
>]; } diff --git a/work/dot/exploit.dot b/work/dot/exploit.dot index 6e9eb18..51ffdbf 100644 --- a/work/dot/exploit.dot +++ b/work/dot/exploit.dot @@ -3,13 +3,14 @@ digraph G { shape="plaintext" label=< - - + + + - - - - + + + +
data20xF9<- SP
[payload]0xFA<- BP
[payload]0xC8← SP (vuln)
[payload]...
[payload]0xFA← BP (vuln)
[controlled IP]0xFB
*0xFE0xFC
*0xFF0xFD
data10xFE
data10xFF
[BP (main)]0xFC
[*input]0xFD
argc0xFE
argv0xFF
>]; }