Skip to content

Commit

Permalink
Typo
Browse files Browse the repository at this point in the history
  • Loading branch information
ctfhacker committed Jul 12, 2015
1 parent f0627c0 commit 21ecb96
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion polictf-2015/johns-shuffle/README.md
Expand Up @@ -12,7 +12,7 @@ John is completely drunk and unable to protect his poor stack.. Fortunately he c
```

## Recon
The first shot at overflowing by throwing a ton of `A`'s worked. E don't actually know what the vulnerbility was, as I didn't open the binary in IDA.
The first shot at overflowing by throwing a ton of `A`'s worked. We don't actually know what the vulnerbility was, as I didn't open the binary in IDA.

Once we have control of EIP, and the fact that NX is on, we have to start ROP'ing. Using `pwntools`, We immediately see that we have `system` in our binary, but not the string `/bin/sh`. In order to ROP into `system` we have to have a pointer to the string `/bin/sh`. No worries though, because we also have `read` in our binary.

Expand Down

0 comments on commit 21ecb96

Please sign in to comment.