{"blog_url":"https://kam1tsur3.hatenablog.com/","image_url":null,"author_name":"kam1tsur3","width":"100%","categories":["ExploitEducation","pwn"],"provider_url":"https://hatena.blog","published":"2019-11-05 01:04:35","provider_name":"Hatena Blog","description":"\u524d\u56de\u306e\u7d9a\u304d\u3067\u3001\u4eca\u56de\u306fFormat\u7de8\u74b0\u5883\u306f\u30b5\u30a4\u30c8\u306b\u3042\u308bqemu\u74b0\u5883\u3092\u6301\u3063\u3066\u304d\u305f\u3002format\u7de8\u306f\u5168\u306664bit\u74b0\u5883\u3067\u5b9f\u884c\u3057\u305f\u3002\u30d0\u30a4\u30ca\u30ea\u306f/opt/phoenix/amd64\u4e0b\u306b\u3042\u308b\u3002 Format-Zero Format-One Format-Two Format-Three Format-Four \u307e\u3068\u3081 Format-Zero fgets\u3067buffern\u306b\u30b5\u30a4\u30ba\u5206\u5165\u529b\u3092\u53d7\u3051\u53d6\u308a\u3001\u305d\u306e\u5f8clocals.dest\u306bbuffer\u306e\u5185\u5bb9\u3092sprintf\u3057\u3066\u3042\u3052\u308b\u3002 \u3053\u3053\u306b\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306a\u3069\u306f\u7121\u304f\u3001stack\u4e0a\u3067locals.dest\u306e\u4e0b\u306b\u914d\u7f6e\u3055\u308c\u3066\u3044\u308blocals.changeme\u3092\u66f8\u304d\u63db\u3048\u308b\u306e\u304c\u76ee\u6a19\u2026","title":"Exploit Education  Phoenix-Format\u7de8","height":"190","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fkam1tsur3.hatenablog.com%2Fentry%2F2019%2F11%2F05%2F010435\" title=\"Exploit Education  Phoenix-Format\u7de8 - \u904e\u5bc6\u3067\u3059\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","url":"https://kam1tsur3.hatenablog.com/entry/2019/11/05/010435","author_url":"https://blog.hatena.ne.jp/kam1tsur3/","version":"1.0","blog_title":"\u904e\u5bc6\u3067\u3059","type":"rich"}