Skip to content

Commit

Permalink
Update unauthorized.md
Browse files Browse the repository at this point in the history
  • Loading branch information
akrasuski1 committed May 3, 2018
1 parent 348e0ec commit 8ce9de0
Showing 1 changed file with 9 additions and 7 deletions.
16 changes: 9 additions & 7 deletions 2018-04-30-rhme3/unauthorized.md
Expand Up @@ -5,13 +5,15 @@

Notes:

> structure at 0x3001
> sha256(password) - 0x20 bytes
> address(username) - 2 bytes
> size(username) + 1 - 2 bytes
> username
```
structure at 0x3001
sha256(password) - 0x20 bytes
address(username) - 2 bytes
size(username) + 1 - 2 bytes
username
```

> We can overwrite it, because of unchecked `alloca`.
We can overwrite it, because of unchecked `alloca`.

Final code:

Expand Down Expand Up @@ -55,4 +57,4 @@ def attack(connection):
context.log_level = "debug"
with serialtube(port = "/dev/ttyUSB0", baudrate = 115200) as connection:
attack(connection)
```
```

0 comments on commit 8ce9de0

Please sign in to comment.