{"provider_url":"https://hatena.blog","published":"2014-07-30 02:11:23","blog_title":"\u3082\u3082\u3044\u308d\u30c6\u30af\u30ce\u30ed\u30b8\u30fc","url":"https://inaz2.hatenablog.com/entry/2014/07/30/021123","type":"rich","height":"190","provider_name":"Hatena Blog","author_name":"inaz2","categories":["Exploit"],"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Finaz2.hatenablog.com%2Fentry%2F2014%2F07%2F30%2F021123\" title=\" x64\u3067Sigreturn Oriented Programming\u306b\u3088\u308bASLR+DEP+RELRO\u56de\u907f\u3092\u3084\u3063\u3066\u307f\u308b - \u3082\u3082\u3044\u308d\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","title":" x64\u3067Sigreturn Oriented Programming\u306b\u3088\u308bASLR+DEP+RELRO\u56de\u907f\u3092\u3084\u3063\u3066\u307f\u308b","version":"1.0","blog_url":"https://inaz2.hatenablog.com/","image_url":null,"width":"100%","author_url":"https://blog.hatena.ne.jp/inaz2/","description":"x64\u74b0\u5883\u3067\u306f\u3001x86\u74b0\u5883\u3068\u306f\u7570\u306a\u308a\u95a2\u6570\u306e\u5f15\u6570\u306f\u30ec\u30b8\u30b9\u30bf\u306b\u30bb\u30c3\u30c8\u3055\u308c\u308b\u3002 \u3053\u306e\u305f\u3081\u3001ROP\u306b\u304a\u3044\u3066\u306fpop rdi; ret\u306a\u3069\u306egadget\u3092\u4f7f\u3044\u3001\u8907\u6570\u306e\u30ec\u30b8\u30b9\u30bf\u306b\u5024\u3092\u30bb\u30c3\u30c8\u3057\u3066\u304b\u3089\u95a2\u6570\u306b\u30b8\u30e3\u30f3\u30d7\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3002 \u307e\u305f\u3001x64\u3067\u306fx86\u306b\u5b58\u5728\u3057\u305fpushad\u3001popad\u547d\u4ee4\u304c\u306a\u304f\u306a\u3063\u305f\u305f\u3081\u3001popad\u547d\u4ee4\u3092\u5229\u7528\u3057\u3066\u8907\u6570\u306e\u30ec\u30b8\u30b9\u30bf\u306e\u5024\u3092\u4e00\u5ea6\u306b\u30bb\u30c3\u30c8\u3059\u308b\u3053\u3068\u306f\u3067\u304d\u306a\u3044\u3002 \u3057\u304b\u3057\u3001sigreturn\u30b7\u30b9\u30c6\u30e0\u30b3\u30fc\u30eb\u3092\u4f7f\u3046\u3068\u3001popad\u547d\u4ee4\u306e\u3088\u3046\u306b\u30b9\u30bf\u30c3\u30af\u306b\u7f6e\u3044\u305f\u5024\u3092\u8907\u6570\u306e\u30ec\u30b8\u30b9\u30bf\u306b\u4e00\u5ea6\u306b\u30bb\u30c3\u30c8\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u3002 \u3053\u308c\u3092\u5229\u7528\u3059\u308b\u3068\u4efb\u610f\u306e\u30b7\u30b9\u30c6\u30e0\u30b3\u30fc\u30eb\u3092\u547c\u3076\u3053\u3068\u304c\u3067\u304d\u3001\u3053\u308c\u3092\u9023\u7d9a\u3057\u3066\u884c\u3046\u624b\u6cd5\u306fSigre\u2026"}