Re: CSR: Exploitation Challenge

supers0nic_at_redwhitearmy.com
Date: 07/20/05

  • Next message: Steven Hill: "CSR: challenge update..." 
    Date: 20 Jul 2005 01:19:02 -0000
To: vuln-dev@securityfocus.com
    ('binary' encoding is not supported, stored as-is) Is it really possible? I compiled it, and for ex, looking for the address of printf. However gdb said:

    gdb> p printf
    $2 = {<text variable, no debug info>} 0xb7e93758 <printf>
    gdb>

    actually its address varies according to the application even if it's dynamically linked. Or am I missing a point?

    If this binary is accessible through gdb, it means I already have shell access and it's somewhat meaningless...

  • Next message: Steven Hill: "CSR: challenge update..."

    Relevant Pages

    • Re: [9fans] OS X threads + dynamic linking
      ... on the given stack. ... A gdb session running the program ... It's dying in the dynamic linker trying to resolve printf. ... char stack; ...
      (comp.os.plan9)
    • Re: phtread_create while pthread_cond_timedwait in gdb
      ... When I run this program without gdb I get the following (as ... THREAD 2: printf ... THREAD 0: Timer expired ... static void *func1; ...
      (comp.os.linux.development.apps)
    • Re: std::ostringstream, urgent
      ... > make its destructor explode? ... Are you sure it dies *before* the second printf? ... so if the program dies any buffered data may fail ... If you're using GDB: ...
      (comp.lang.cpp)
    • Re: NASM 0.98.39 vs. NASM 2.03.01 disassembly
      ... Indeed so, but, with only a trivial effort, gdb can also be made more ... asm friendly, even for programs which do not have debug info. ... The a64 definitions follow the same pattern, but require four printf ...
      (alt.lang.asm)
    • phtread_create while pthread_cond_timedwait in gdb
      ... I experience a strange behavior while using gdb to test my software. ... Thread B does a simple printf. ... static void *func1; ... printf("Could not read realtime timer \n"); ...
      (comp.os.linux.development.apps)