{"image_url":null,"type":"rich","categories":["Exploit"],"width":"100%","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Finaz2.hatenablog.com%2Fentry%2F2014%2F07%2F15%2F023406\" title=\" ROP stager + Return-to-dl-resolve\u306b\u3088\u308bASLR+DEP\u56de\u907f - \u3082\u3082\u3044\u308d\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","title":" ROP stager + Return-to-dl-resolve\u306b\u3088\u308bASLR+DEP\u56de\u907f","author_name":"inaz2","blog_title":"\u3082\u3082\u3044\u308d\u30c6\u30af\u30ce\u30ed\u30b8\u30fc","version":"1.0","provider_name":"Hatena Blog","height":"190","blog_url":"https://inaz2.hatenablog.com/","provider_url":"https://hatena.blog","published":"2014-07-15 02:34:06","author_url":"https://blog.hatena.ne.jp/inaz2/","url":"https://inaz2.hatenablog.com/entry/2014/07/15/023406","description":"\u300cROP stager + read/write\u306b\u3088\u308bASLR+DEP\u56de\u907f\u300d\u3067\u306f\u3001PLT\u4e2d\u306ewrite\u95a2\u6570\u3092\u4f7f\u3046\u3053\u3068\u3067libc\u306e\u30d9\u30fc\u30b9\u30a2\u30c9\u30ec\u30b9\u3092\u7279\u5b9a\u3057\u3001system\u95a2\u6570\u306b\u3088\u308b\u30b7\u30a7\u30eb\u8d77\u52d5\u3092\u884c\u3063\u305f\u3002 \u3053\u306e\u65b9\u6cd5\u3067\u306f\u5404\u30e9\u30a4\u30d6\u30e9\u30ea\u95a2\u6570\u306e\u30aa\u30d5\u30bb\u30c3\u30c8\u3092\u8abf\u3079\u3066\u304a\u304f\u5fc5\u8981\u304c\u3042\u308b\u304c\u3001\u3053\u306e\u30aa\u30d5\u30bb\u30c3\u30c8\u306flibc\u306e\u7a2e\u985e\u3084\u30d0\u30fc\u30b8\u30e7\u30f3\u3054\u3068\u306b\u7570\u306a\u308b\u305f\u3081\u3001\u4e0d\u660e\u306a\u5834\u5408\u306f\u6700\u521d\u306b\u3053\u308c\u3092\u7279\u5b9a\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002 \u3057\u304b\u3057\u3001\u30e9\u30a4\u30d6\u30e9\u30ea\u95a2\u6570\u306e\u521d\u56de\u547c\u3073\u51fa\u3057\u6642\u306b\u304a\u3051\u308b\u30a2\u30c9\u30ec\u30b9\u89e3\u6c7a\u306e\u4ed5\u7d44\u307f\u3092\u5229\u7528\u3059\u308b\u3068\u3001libc\u306e\u7a2e\u985e\u306b\u3088\u3089\u305a\u4efb\u610f\u306e\u30e9\u30a4\u30d6\u30e9\u30ea\u95a2\u6570\u3092\u547c\u3076\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308b\u3002 \u3053\u306e\u65b9\u6cd5\u306fReturn-to-dl-resolve\u306a\u3069\u3068\u547c\u3070\u308c\u308b\u3002 \u3053\u3053\u3067\u306fASLR\u2026"}