{"width":"100%","published":"2017-03-20 13:15:38","image_url":null,"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fmoraprogramming.hateblo.jp%2Fentry%2F2017%2F03%2F20%2F131538\" title=\"0ctf 2017 - \u6b23\u5feb\u306e\u81f3\u308a\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","categories":["ctf"],"blog_url":"https://moraprogramming.hateblo.jp/","author_name":"moratorium08","author_url":"https://blog.hatena.ne.jp/moratorium08/","blog_title":"\u6b23\u5feb\u306e\u81f3\u308a","provider_name":"Hatena Blog","height":"190","type":"rich","version":"1.0","description":"char rop\u3067\u304d\u308b\u3093\u3060\u3051\u3069\u3001\u9001\u308a\u3053\u3081\u308b\u30c7\u30fc\u30bf\u304c\u8b58\u5b57\u53ef\u80fd\u6587\u5b57\u3060\u3051\u3001\u3068\u3044\u3046\u554f\u984c\u3002rop\u7528\u306blibc\u304c0x5555e000\u3042\u305f\u308a\u306b\u30ed\u30fc\u30c9\u3055\u308c\u308b\u3002\u307e\u3041\u3001\u3042\u308b\u610f\u5473\u9811\u5f35\u308c\u3070\u3067\u304d\u308b\u554f\u984c\u306a\u306e\u3067\u3001solver\u306f\u7d50\u69cb\u3044\u305f\u3002 \u65b9\u91dd\u306f\u3001/bin/sh\u306e\u30a2\u30c9\u30ec\u30b9(0x556bb7ec)\u81ea\u4f53\u306f\u3001\u30ed\u30fc\u30c9\u4e0d\u53ef\u80fd\u306a\u6587\u5b57\u5217\u3092\u542b\u3080\u306e\u3067\u3001\u305d\u308c\u306b\u8fd1\u304f\u3066\u30ed\u30fc\u30c9\u53ef\u80fd\u306a\u30a2\u30c9\u30ec\u30b9\u3067\u3042\u308b0x556b7e7e\u3092ebx\u306b\u30ed\u30fc\u30c9\u3057\u3001ebx\u306b0x396e\u3092\u8db3\u3059\u3002\u305d\u3057\u3066\u3001\u30b7\u30b9\u30c6\u30e0\u30b3\u30fc\u30ebexecve(ebx=\u201c/bin/sh\u201d, ecx = [\u201c/bin/sh\u201d, NULL], edx=0)\u306e\u72b6\u614b\u3092\u4f5c\u308b\u3002 \u3057\u304b\u3057\u3001\u4e00\u5ea6\u4f5c\u3063\u305febx\u306e\u30a2\u30c9\u30ec\u30b9\u3092ecx\u306b\u30b3\u2026","url":"https://moraprogramming.hateblo.jp/entry/2017/03/20/131538","provider_url":"https://hatena.blog","title":"0ctf 2017"}